LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › www.eastersealsia.org Listed by lynx Ransomware Group

HIGH severity claimedUnverified claimHow we verify

www.eastersealsia.org Listed by lynx Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·June 18, 2026
www.eastersealsia.org Listed by lynx Ransomware Group

Reported June 18, 2026.

HIGH
Severity
June 18, 2026
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

www.eastersealsia.org has been listed by the Lynx ransomware group as a victim of a ransomware attack that resulted in the exfiltration of internal files. The incident was disclosed on June 18, 2026, affecting an undisclosed number of people; individuals should check whether their information was involved and take protective steps.

Severity & verification
HIGH severity claimedUnverified claim
Exposes medical data.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

On June 18, 2026, the ransomware group lynx listed www.eastersealsia.org on its site. The listing states that internal files were exfiltrated during a ransomware attack. The number of individuals whose information may be involved is not known, and no further details on the scope or timing of the incident have been made public.

Inside the incident

The only confirmed information is the June 18, 2026 listing and the claim that internal files were taken. No figure for records or individuals affected has been released. The method of initial access and the duration of any unauthorized presence inside the network remain undisclosed.

The group behind it: lynx

Lynx is a ransomware operation that maintains a public leak site where it lists organizations it claims to have targeted. The group typically exfiltrates data before encrypting systems and then uses the threat of publication to pressure victims. Its listings are presented by the group itself; independent confirmation of the underlying claims is not available in this case.

About www.eastersealsia.org

www.eastersealsia.org operates Easterseals Iowa’s Assistive Technology Program. The program assists Iowans of all ages who have disabilities, including older adults, by providing consultations, a demonstration center, a lending library, and access to durable medical equipment. It also delivers education and training, both in person and online. Organizations in this sector routinely collect and store personal, medical, and financial information tied to service delivery and equipment provision.

The information in question

The listing identifies only “internal files” as having been exfiltrated. No inventory of specific data fields has been published. Organizations of this type commonly hold client names, contact details, disability-related assessments, equipment records, and payment information, but the exact contents of the exfiltrated material have not been confirmed.

What's at stake

Individuals served by the program may face risks of identity misuse or unwanted disclosure of health-related details if the files contain personal information. The organization itself may incur costs for investigation, notification, and system restoration. Because the scale of exposure is unknown, the full extent of these consequences cannot yet be measured.

What to do if you're exposed

Anyone who has received services from Easterseals Iowa should monitor their financial accounts and credit reports for unusual activity. Changing passwords on any accounts linked to the organization and enabling multi-factor authentication are immediate steps that limit further exposure. Readers can also run a free exposure scan of their email address against known breach data to check whether their information appears in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

Companywww.eastersealsia.org security record
84/100
DoxxScan™ · Low doxx risk
B- 76Above-average record

1 reported incident on record.

See www.eastersealsia.org’s full breach history →

More recent breaches

lifelongaccess.org Listed by lynx Ransomware GroupMay 10, 2026www.burdettedental.com Listed by lynx Ransomware GroupJanuary 5, 2026crawfordorthodontics.net Listed by lynx Ransomware GroupJanuary 5, 2026www.wolfconstruction.net Listed by lynx Ransomware GroupJune 18, 2026

Latest breaches

Read GalaxyWarden’s full analysis of the www.eastersealsia.org Listed by lynx Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by lynx — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram