Commercial construction firm Novati Constructions was listed on the Lynx ransomware darknet leak page. Threat actors stated they successfully exfiltrated internal financial audits, building tender documents, legal project contracts, and workplace safety incident logs.