RANSOMWARE VICTIMCONSTRUCTION⚠ DUPLICATE CLAIM
nationalcoatingsinc.com
nationalcoatingsinc.com
lynx📍 United States (US)📅 October 13, 2025
8
same group
Attack Intelligence
nationalcoatingsinc.com was compromised in a ransomware attack attributed to lynx in October 2025. The organization, operating in the Construction sector in United States, was added to the group's data leak site as part of an extortion campaign.
lynx operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
National Coatings is a trusted commercial and industrial painting company serving a broad range of commercial and industrial customers, large and small, throughout the U.S.A. They offer expert painting, wallcovering, industrial coatings, and sandblasting services, plus more
Additional Details
Other Victims — lynx (8)
www.jerryleigh.com
US · Other
Aug 2026
www.talbotdes.org
GB · Other
Aug 2026
www.someco.com
Not Found
Jun 2026
www.eastersealsia.org
SG · Healthcare
Jun 2026
www.wolfconstruction.net
US · Construction
Jun 2026
www.commonwealth-partners.com
GB · Business Services
Jun 2026
bayareaherbs.com
US · Consumer Services
May 2026
csb-battery.com
TW · Manufacturing
May 2026
Quick Facts
CountryUnited States (US)
SectorConstruction
Attack DateOct 13, 2025
Domainnationalcoatingsinc.com
Intel Sourceransomware.live
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.