Incident Overview

The LYNX ransomware group claims to have obtained data from CSA Tax & Advisory, a licensed accounting firm based in Haverhill, Massachusetts.

About CSA Tax & Advisory: CSA Tax & Advisory is a licensed accounting firm specializing in a wide range of services including personal financial planning, estate planning, and tax services. They cater to business owners, executives, and independent professionals, providing solutions for accounting, payroll, and tax problems. The firm is known for its professional and responsive service, ensuring each client receives personalized attention. With over 75 years of experience, CSA Tax & Advisory aims to help clients navigate complex tax laws and improve their financial well-being.

According to the listing on LYNX's dark web leak site, the compromised data includes:

• Publication category: Proof
• Income: $7,300,000
• Date of publication: 26/12/2025

Given the nature of an accounting firm, the potentially compromised data could include highly sensitive information such as:

• Client tax returns and financial records
• Personal identifying information (PII) of clients
• Business financial statements
• Estate planning documents
• Payroll information
• Internal firm communications and documents

The LYNX ransomware group has been actively targeting organizations across various sectors. This incident represents a significant threat to CSA Tax & Advisory's clients, as accounting firms typically maintain extensive repositories of sensitive financial and personal information.

The claim has not been independently verified.