Ransomware Group: BABUK2

VICTIM NAME: lexmark[.]com Company

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BABUK2 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page involving lexmark.com, a company operating in the Technology sector, was discovered on March 11, 2025. The page is associated with the group known as Babuk2. While details on a specific compromise date are not disclosed, the information was published on the same day it was discovered. The content suggests that sensitive information may have been compromised, which could potentially impact the company’s operations and reputation. The threat actor group is known for their involvement in various ransomware incidents, thereby highlighting the seriousness of this leak.

The leak page also features a screenshot depicting elements related to the breached data. However, explicit details regarding the type of information compromised are not specified. The presence of any downloadable content or links was not mentioned, indicating that the primary exposure may involve direct threats or published data in a static manner. This situation underscores the persistent risks faced by companies within the technology industry, especially as they are targets for cybercriminal activities designed for financial gain.