Ransomware group lynx hits Keller Polska
Keller Polska — a construction target operating in PL has been listed by the lynx ransomware group on 2026-02-28. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Keller Polska |
|---|---|
| Threat Group | lynx |
| Summary | Keller Polska, a construction organization in Poland, was listed by the lynx ransomware group on its leak site on 2026-03-13. |
| Date of Breach | 2026-02-28 |
| Discovery Date | 2026-03-13 |
| Region | PL |
| Target Domain | www.kellerpolska.pl |
| Business Sector | Construction |
| Severity | MEDIUM |
Claim by lynx
Keller Polska, operating for over 20 years, is a leader in the geotechnical market in Poland and this part of Europe. We carry out both small local projects and the largest and most important for the economy. As one of the Keller Group companies, we also have the financial capabilities, know-how, skills and global reach to handle the most demanding projects.
Posted by the lynx threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
www.kellerpolska.pl
Leak post (onion / Tor)
http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad.onion/leaks/69ab22c69c439c5f45a86b32
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

