RICHARD MILLE ASIA PTE. LTD & D'LEAGUE PTE. LTD. Listed by lynx Ransomware Group

On June 27, 2025, luxury watch retailer Richard Mille Asia Pte. Ltd. and sports entertainment company D'League Pte. Ltd. appeared on the leak site of the lynx Ransomware Group, with the attackers claiming to have exfiltrated internal files from companies linked to Singapore-based businessman Dave Tan's holding.

Reported Details of the Incident

Public reporting indicates the two Singapore entities were listed together on the lynx leak portal. The ransomware group states it obtained internal company files during an attack on Dave Tan's portfolio of businesses. No specific victim count has been disclosed, and the precise volume or nature of the stolen data remains unconfirmed beyond the broad description of internal files. The listing appeared on the group's onion site, which is tracked by ransomware monitoring services such as ransomware.live.

Available reporting describes this as a typical ransomware double-extortion incident in which the group first encrypts systems and then threatens to publish stolen data unless a ransom is paid. As of the listing date, June 27, 2025, the files had not been publicly released in full, but the threat of publication was active.

Why This Matters for You and Your Family

When companies like these suffer breaches, the information inside can include contracts, employee records, vendor details, correspondence, and personal identifiers that ultimately trace back to ordinary people. If your employer, your children's school, your doctor, or any service you use does business with affected organizations, fragments of your data may already be circulating. Internal files often contain spreadsheets, scanned documents, or emails that list home addresses, phone numbers, dates of birth, and family member names.

Once that information leaves a corporate network it rarely stays contained. It moves through underground markets and automated tools that link it to your social-media handles, gaming accounts, and other online footprints. For families this can mean sudden exposure of children's names and ages alongside parental contact details, increasing risks ranging from phishing to physical safety concerns.

The Doxxing and Identity-Chain Risks

Ransomware leaks rarely stop at one company. The stolen files frequently contain email addresses, phone numbers, or usernames that attackers or subsequent buyers can cross-reference against other breaches. This creates an identity chain: a single leaked work email can reveal your personal accounts, which in turn expose your children's gaming profiles or family photos. Public reporting shows these chains often lead to full doxxing packages sold on dark-web forums.

Credential leaks like this one cascade into account takeovers when the same password has been reused elsewhere. Gaming accounts belonging to you or your children are especially vulnerable because they frequently share email addresses with family or work accounts. Once compromised, those gaming profiles can be used to harass, extort, or further map your household's real-world identity.

Lynx Ransomware Group's Known Activity

Public reporting attributes the lynx Ransomware Group with emerging in late 2024. The group has targeted organizations across Asia and Europe, listing victims in sectors including manufacturing, professional services, and retail. Its typical playbook involves gaining initial access through phishing or exploited remote desktop protocols, followed by exfiltration of sensitive files before deploying encryption. The group then posts samples on its leak site and sets payment deadlines, threatening full data release if the victim does not pay.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity, then use the cleanup to remove what you can.
• Rotate any passwords used at Richard Mille Asia, D'League, or Dave Tan's related companies anywhere else you have reused them, and switch to 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught within hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children's gaming accounts that often chain back to the same addresses and identifiers.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own accounts.

The speed with which ransomware groups move stolen data means families must act before their information appears in the next resale or doxxing package. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for you and your entire household, including children's gaming accounts. Starting protective measures now limits how far any single breach can reach.