Russian Lynk group leaks sensitive UK MoD files, including info on eight military bases

Russian cybercrime group Lynx breached Dodd Group, a contractor for the UK Ministry of Defence, stealing and leaking hundreds of sensitive files on eight RAF and Royal Navy bases, according to The Daily Mail. The incident is described as having occurred on 23 September, with the group claiming the theft of roughly 4 TB of data and beginning to leak it after negotiations reportedly failed.

Compromised material includes staff names and emails, contractors’ names, phone numbers, car details, and MoD staff contacts, with some documents labelled “Controlled” or “Official Sensitive.” Leaked documents reportedly reveal sensitive details on bases such as RAF Lakenheath, RAF Portreath, and RAF Predannack, along with visitor logs, internal emails, security guidance, and construction records for RAF Lakenheath and RAF Mildenhall. The MoD has launched an investigation, while intelligence experts warn that nation-state actors could use the stolen data for further cyber operations.