Best Profil listed by the Lynx ransomware group

Overview

The Lynx ransomware group has listed Best Profil, a Moroccan human resources company providing temporary work, recruitment and training services, on its leak site. The listing appeared on 6 June 2025.

What was published

The group claims to have exfiltrated data from the HR company. Staffing agencies hold candidate profiles, HR records and client contracts, which are the likely contents of the exfiltration.

Risks for affected individuals

• Candidates' personal data may be exposed.
• HR records contain sensitive employee information.
• Client contracts could be misused.

What remains unknown

• The volume of data involved.
• Whether the data has been published.
• The response status of the company.

What affected people should do

Candidates and employees should monitor their accounts and be alert to phishing referencing the agency. Best Profil should notify affected individuals, secure its systems, and coordinate with Moroccan authorities.