La Rioja Alta
Attack Intelligence
La Rioja Alta was compromised in a ransomware attack attributed to lynx in February 2026. The organization, operating in an undisclosed sector in Spain, was added to the group's data leak site as part of an extortion campaign.
lynx operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
La Rioja Alta, S.A. is a prominent winery offering a diverse range of wines from renowned Spanish wine regions, including Rioja, Ribera del Duero, and Rias Baixas. The company provides wine tours and experiences to deepen the understanding and appreciation of winemaking, catering to wine enthusiasts and tourists. With multiple wineries under their ownership, their offerings emphasize sustainability and respect for nature, while also focusing on producing high-quality wines.