TriMed Data Breach Investigation

A ransomware attack on TriMed Inc., a surgical solutions company and subsidiary of healthcare giant Henry Schein, has raised serious concerns about the safety of personal and professional data held by medical device companies. The attack, carried out by a Russia-linked cybercriminal group known as Lynx, resulted in the exfiltration of a wide range of sensitive files.

If you believe your information was compromised, contact the data breach lawyers at The Lyon Firm today for a free and confidential consultation.

What Happened in the TriMed Ransomware Attack?

In early October 2025, the Lynx ransomware group claimed responsibility for an attack on TriMed Inc. and listed the company on its dark web leak site. TriMed confirmed it had suffered a cybersecurity incident and took systems offline in an effort to contain the damage.

Security analysts noted that the range and depth of the stolen material suggested the attackers may have had extended access to TriMed's internal systems before the breach was detected. This type of prolonged unauthorized access can significantly expand the number of affected individuals and the severity of the harm caused.

Who Is the Lynx Ransomware Group?

Lynx is a ransomware-as-a-service (RaaS) operation with ties to Russia that first appeared on the threat landscape in mid-2024. Since then, the group has listed nearly 200 victims on its dark web site. Lynx is known to target organizations across multiple industries, extracting data, and then threatening to publicly release that data if a ransom is not paid.

What California Law Says About Data Breaches

Companies must now notify affected California residents within 30 calendar days of discovering a breach, and must alert the California Attorney General within 15 days of sending those individual notices. This new standard replaces the previous, more flexible "without unreasonable delay" language and creates a concrete legal obligation for businesses handling Californians' data.

Why Hire The Lyon Firm for a Data Breach Case?

The Lyon Firm has built a national reputation representing individuals harmed by corporate negligence, including victims of data breaches involving healthcare and medical device companies.

When a company like TriMed fails to protect the personal information entrusted to it, victims deserve an advocate with the experience and resources to take on that fight. The Lyon Firm offers free, confidential case evaluations and handles data breach cases on a contingency fee basis, meaning you pay no legal fees unless we recover compensation on your behalf.