Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Ransomware attacks today
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
    • Infostealer statistics
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Ransomware attacks today
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
    • Infostealer statistics
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

THE-GENTLEMEN · Threat actor profile

THREAT ACTOR

THE-GENTLEMEN_

Active

The Gentlemen is a ransomware operation that surfaced in 2024 with a small number of high-impact victim claims posted to its public leak site. The group operates under the standard double-extortion model — file encryption paired with stolen-data publication.

For Ransomnews editorial coverage of THE-GENTLEMEN, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

1,161 Victims tracked
0 / 2 Active mirrors
2025-09-09 First listing
2026-11-11 Most recent

Victims by year

  • 2026 1,083
  • 2025 78

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion Gentlecloud Protection snapshot · 2026-08-05 18:08
  • i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion snapshot · 2025-12-17 17:47

Recent victims

The 50 most recent victims claimed by THE-GENTLEMEN. Total in the index: 1,161.

Date listed Victim Description
2026-11-11 Prinsel prinsel.com.mx Productos Infantiles Selectos S.A. de C.V. (PRINSEL) is…
2026-11-11 Solarium solarium.com.br Solarium Revestimentos is a Brazilian manufacturer and…
2026-11-11 National Agency Programmes and Mobility na.org.mk The National Agency for European Educational Programmes and …
2026-11-11 Burgess Lowman CPAs bllcpas.com Burgess Lowman Lay CPAs is an American accounting firm bas…
2026-11-11 Alan Mok Engineering alanmokengineering.com Alan Mok Engineering Pte Ltd is a Singapore-bas…
2026-11-11 Triad Architects triad.co.ke Triad Group is a Kenyan digital marketing and technology c…
2026-11-11 National Investments Company ninv.com National Investments Company (NIC) is one of Kuwait's leading…
2026-11-11 Municipalidad de Cieneguilla municieneguilla.gob.pe Municipalidad Distrital de Cieneguilla is the l…
2026-11-11 Grupo San Cristobal gruposancristobal.com.mx Grupo San Cristóbal is a Mexican group of com…
2026-11-11 Groupe Alternance groupe-alternance.com Groupe Alternance is a French private education …
2026-11-11 Sielke sielke.com Sielke is a German family company founded in 2002 in Hambur…
2026-11-11 imas imas.es I-Mas Informatica S.L. is a Spanish IT services company founde…
2026-11-11 City of Humboldt humboldt.ca City of Humboldt is a municipality in central Saskatchewan…
2026-11-11 Reso Tech Laurentides resotechlaurentides.com Reso & Tech Laurentides is a Canadian industri…
2026-11-11 Darr Equipment darrequipment.com Revenue $304.6 Mil Darreq Equipment is a specialty e…
2026-11-11 MEGATRANS megatrans.com.ar Megatrans S.A. is an Argentine road freight and logis…
2026-11-11 United Pharmacy unitedpharmacy.sa United Pharmaceuticals Company is Saudi Arabia's thi…
2026-11-11 Clancy Systems International clancysystems.com Clancy Systems International is an American parking …
2026-11-11 Orennia orennia.com Orennia is a Canadian energy intelligence platform founded…
2026-11-11 Esri South Africa esri-southafrica.com sri South Africa is the exclusive distributor of …
2026-11-03 MKG Kirchrode mkg-kirchrode.de 900GB MKG Kirchrode is a premium oral and maxillofaci…
2026-11-02 Customs Support customssupport.com Revenue $389.4 Million IZD GmbH Europe's largest cu…
2026-11-02 Mitsubishi Motors Ukraine itsubishi-motors.com.ua Mitsubishi Motors Ukraine is the official impo…
2026-11-02 European Motorcars european-motorcars.com European Motorcars is a multi-brand premium Eur…
2026-11-02 MegChem megchem.com MegChem is a South African engineering consultancy founded…
2026-11-02 TransLogWest translogwest.de TransLogWest S.L. is a Spanish freight forwarding and …
2026-11-02 Neighborhood House Association neighborhoodhouse.org Revenue $238.7 Million Neighborhood House is Por…
2026-11-02 Airdrie Christian Academy airdriechristian.com Airdrie Christian Academy is a private K-12 Chris…
2026-11-02 Academy of the Sacred Heart ashrosary.org Academy of the Sacred Heart is a private Catholic all-gi…
2026-11-02 HighTec hightec.ch HighTec AG is a Swiss industrial engineering company founde…
2026-11-02 Pages Asociados pages.com.ve Pages Asociados C.A. is a Venezuelan engineering and cons…
2026-11-02 Secretaria de Estado de Saúde saude.mt.gov.br The Secretaria de Estado de Saúde de Mato Grosso is th…
2026-11-02 Five Star Plating fivestarplating.com Five Star Plating LLC is an American electroplatin…
2026-11-02 Barking Shopfronts bsfgroup.co.uk Barkingshopfronts Limited is a London-based shop front …
2026-11-02 Antwerp House Dental antwerphousedentistry.co.uk Antwerp House Dental Practice is a premium…
2026-11-02 Logsytech Group logsytech.fr Logsytech Group is a French logistics holding company bas…
2026-11-02 Lighting Direct lightingdirect.co.nz Lighting Direct is New Zealand's largest lighting…
2026-11-02 RedBlink Technologies redblink.com RedBlink Technologies is an AI and software development c…
2026-11-02 Coemi Imóveis coemi.com.br Coemi Imóveis is a Brazilian real estate agency founded i…
2026-11-02 Labatec labatecpharma.com Revenue $19 Million Labatec S.A. is a Swiss laborato…
2026-11-02 KABS Pharmaceutical Services kabs.com Revenue $27.2 Million KABS Laboratories is a Canadian pharmac…
2026-11-02 Solutis Tecnologias solutis.com.br Revenue $53 Million Solutis Tecnologias is a Brazilian …
2026-11-02 Grupo Lorrio grupolorrio.es Grupo Lorrio is a Spanish industrial engineering and co…
2026-11-02 McEwan Fraser Legal mcewanfraserlegal.co.uk McEwan Fraser Legal is Scotland's largest prop…
2026-11-02 Hausarztpraxis Ries hausarzt-praxis-ries.de Hausarztpraxis Ries is a family general practi…
2026-10-30 NOVADATA novadata.com.ar NOVADATA S.A. is an Argentine IT integration group fou…
2026-10-30 CommTank commtank.com CommTank Inc is a US storage tank contractor founded in 1…
2026-10-30 Ined ined.fr INED is France's National Institute for Demographic Studies, f…
2026-10-28 GIO Dental giodentalsl.com GIO Dental SL is a modern dental clinic and laboratory…
2026-10-28 SK Capital Partners skcapitalpartners.com Revenue $63 Million SK Capital Partners is a New…

CONFIRMED ATTACKS

The Gentlemen confirmed attacks: 95 verified incidents

Ransomnews has verified 95 The Gentlemen incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from September 2025 to October 2026. United States accounts for 14 of them (15%), with victims recorded in 37 countries in total. The most affected sector is manufacturing, at 18 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 2; the outcome is unrecorded in the remaining 92. Where a figure was disclosed (12 cases), these incidents account for 1,194,072 exposed records.

95Verified incidents
37Countries
2025–2026Active range
33%Paid, where outcome known

Confirmed victims by year

  • 20254
  • 202691

Most affected sectors

  • Manufacturing18
  • Healthcare17
  • Government15
  • Other14
  • Education7
  • Finance5
  • Retail5
  • Service5

Most affected countries

  • United States14
  • Japan10
  • Poland8
  • Australia6
  • South Africa5
  • France5
  • Germany4
  • Austria3

Verified The Gentlemen incidents

DateOrganisationSector LocationRecordsRansom paidSource
October 2026 Epichealth Medical Clinics Healthcare Warrnambool, Australia — Unknown Source
October 2026 Mandurah State Emergency Service Government Mandurah, Australia — Unknown Source
October 2026 Santa Barbara Endodontics Other United States — Unknown Source
September 2026 FTAPI Software GmbH Technology Munich, Germany — Unknown Source
September 2026 Sharp Office Service Broadmeadow, Australia — Unknown Source
September 2026 Kariera Zdrowit Healthcare Bytom, Poland — Unknown Source
September 2026 Veradigim Inc. Healthcare Illinois, United States — Unknown Source
August 2026 ixa systems SA Service Crissier, Switzerland — Unknown Source
August 2026 Hong Kong Baptist University Education Kowloon, Hong Kong — No Source
August 2026 CAZ Investments, LP Finance Texas, United States 13,817 Unknown Source
August 2026 ACA SpA Government Pescara, Italy — Unknown Source
August 2026 Yapı Merkezi Other Istanbul, Turkey — Unknown Source
August 2026 Ollies Place Retail Silverwater, Australia — Unknown Source
August 2026 Gfeller Treuhand und Verwaltungs AG Service Dübendorf, Switzerland — Unknown Source
August 2026 Nutex Health Inc. Healthcare Texas, United States — Unknown Source
August 2026 Arbeiterkammer (Austrian Chamber of Labour) Other Salzburg, Austria 270,000 Unknown Source
August 2026 GEB SAS Manufacturing Tremblay-en-France, France — Unknown Source
August 2026 Akatake Engineering Co., Ltd. Manufacturing Numazu, Japan — Unknown Source
August 2026 PharmaEssentia (Panco Healthcare) Healthcare Taipei, Taiwan — Unknown Source
July 2026 HIWIN S.r.l. Manufacturing Agrate Brianza, Italy — Unknown Source
July 2026 Oldelval (Oleoductos del Valle) Other Cipolletti, Argentina — Unknown Source
July 2026 Kenaitze Indian Tribe Government Alaska, United States — Unknown Source
July 2026 AnMed Healthcare South Carolina, United States 501 Unknown Source
July 2026 Thialf BV Other Heerenveen, Netherlands — Unknown Source
July 2026 Herbaház Retail Budapest, Hungary — Unknown Source
July 2026 Gallant Finland Finance Tampere, Finland — Unknown Source
July 2026 Metro Mondego Government Coimbra, Portugal — Unknown Source
July 2026 Ecopetrol S.A. Other Bogotá, Colombia 3,300 Unknown Source
July 2026 Royal Foods Aust Pty Ltd Food and Beverage Hemmant, Australia — Unknown Source
July 2026 Spedidam Other Paris, France — Unknown Source
June 2026 SAMWUMED (via MIP Holdings) Healthcare Cape Town, South Africa — Unknown Source
June 2026 Hollard Insurance Group (via MIP Holdings) Finance Johannesburg, South Africa — Unknown Source
June 2026 LegalWise (via MIP Holdings) Legal Rooderpoort, South Africa — Unknown Source
June 2026 MIP Holdings (Pty) Ltd. Technology Johannesburg, South Africa — Yes Source
June 2026 Advantage Home Health Care Healthcare Indiana, United States 19,851 Unknown Source
June 2026 Hooke Laboratories Healthcare Massachusetts, United States 41 Unknown Source
June 2026 Arabia Falcon Insurance Company Finance Muscat, Oman — Unknown Source
June 2026 TKMS ATLAS North America, LLC Manufacturing Virginia, United States — Unknown Source
June 2026 Indra Group (subsidiary) Manufacturing Madrid, Spain — Unknown Source
June 2026 Stadttheater Gießen Other Gießen, Germany — No Source
June 2026 Au Vieux Campeur Retail Paris, France — Unknown Source
June 2026 Akademia Leona Koźmińskiego - Kozminski University Education Warsaw, Poland — Unknown Source
June 2026 Nationalmuseet Government Copenhagen, Denmark — Unknown Source
June 2026 Ministarstvo zdravstva Republike Hrvatske Government Zagreb, Croatia — Unknown Source
June 2026 Mackay Sugar Food and Beverage Ooralea, Australia — Unknown Source
June 2026 Feuerwehr Allensbach Government Allensbach, Germany — Unknown Source
May 2026 Soniva Dental Care Healthcare Texas, United States 30,000 Unknown Source
May 2026 DEVCO Sp. z o.o. Other Warsaw, Poland — Unknown Source
May 2026 The City of Boyne City Government Michigan, United States — Unknown Source
May 2026 Constructions Piraino Construction Wasquehal, France — Unknown Source
May 2026 IP Rings Limited Manufacturing Tamil Nadu, India — Unknown Source
May 2026 Wielkopolskie Centrum Medyczne REMEDIUM sp. z o.o. Healthcare Poznań, Poland — Unknown Source
May 2026 Koa Glass Co., Ltd. Manufacturing Tokyo, Japan — Unknown Source
May 2026 Vysoká škola finanční a správní (University of Finance and Administration) Education Prague, Czechia — Unknown Source
May 2026 Instituut voor de Nederlandse Taal Other Leiden, Netherlands — Unknown Source
May 2026 Oriental Diamond Co., Ltd. Manufacturing Tokyo, Japan — Unknown Source
April 2026 Gator Cases, LLC Manufacturing Florida, United States 1,171 Unknown Source
April 2026 Arçelik A.Ş. Manufacturing Istanbul, Turkey — Unknown Source
April 2026 Digiprint sp. z o. o. Service Warsaw, Poland — Unknown Source
April 2026 Nostrum Co., Ltd. Technology Tokyo, Japan — Unknown Source
April 2026 East Co., Ltd. Service Tokyo, Japan — Unknown Source
April 2026 Marutake Co., Ltd. Healthcare Nigata, Japan — Unknown Source
April 2026 Heinrich Kopp GmbH Manufacturing Kahl am Main, Germany — Unknown Source
April 2026 Anderlues la Commune Government Anderlues, Belgium — Unknown Source
April 2026 Gem Terminal Industry Co., Ltd. Manufacturing Kaohsiung, Taiwan — Unknown Source
March 2026 Rajagiri Hospital Healthcare Ernakulam, India — Unknown Source
March 2026 JRK Property Holdings, Inc. Other California, United States 113,641 Unknown Source
March 2026 Adaptavist Technology London, United Kingdom — Unknown Source
March 2026 Zámek Náměšť nad Oslavou Government Náměšť nad Oslavou, Czechia — Unknown Source
March 2026 IntraCare Healthcare Auckland, New Zealand — Unknown Source
March 2026 Caja de Seguro Social (CSS) Government Clayton, Panama — Unknown Source
March 2026 SATS Sverige Other Stockholm, Sweden — Unknown Source
March 2026 Omikenshi Co., Ltd. Manufacturing Osaka, Japan — Unknown Source
March 2026 MEDICUS SHUPPAN, Publishers Co., Ltd Other Osaka, Japan 641,000 Unknown Source
February 2026 Hospital ⁠Caribbean Medical Center Healthcare Fajardo, Puerto Rico 92,000 Unknown Source
February 2026 Sasin School of Management Education Bangkok, Thailand — Unknown Source
February 2026 Grand Hotel Taipei Other Taipei, Taiwan — Unknown Source
February 2026 Universidade Federal de Sergipe Education São Cristóvão, Brazil — Unknown Source
February 2026 CHS Villach Education Villach, Austria — Unknown Source
February 2026 ⁠Instituto Nacional de Derechos Humanos Government Santiago, Chile — Unknown Source
February 2026 Centro Universitário Filadélfia (UniFil) Education Londrina, Brazil — Unknown Source
January 2026 ⁠HAFA Manufacturing Yvetot, France — Unknown Source
January 2026 Hart Sp. z o.o. Retail Opole, Poland — Unknown Source
January 2026 Unimed Anápolis Healthcare Anápolis, Brazil — Unknown Source
January 2026 Nishiyama Seisakusho Co., Ltd. Manufacturing Odawara, Japan — Unknown Source
January 2026 Rogers Capital Credit Finance Port Louis, Mauritius — Unknown Source
January 2026 Gady Family Retail Lebring, Austria — Unknown Source
January 2026 Wamtechnik sp. z o.o. Manufacturing Piaseczno, Poland — Unknown Source
January 2026 Sincere Co., Ltd. Utilities Tokyo, Japan — Unknown Source
January 2026 Witzenberg Municipality Government Ceres, South Africa — Unknown Source
January 2026 Ayuntamiento de Beniel Government Beniel, Spain — Unknown Source
December 2025 Grupa Systherm Manufacturing Poznań, Poland — Unknown Source
December 2025 Complexul Energetic Oltenia Government Targu-Jiu, Romania — Unknown Source
November 2025 The Devereux Foundation Healthcare Pennsylvania, United States 8,750 Unknown Source
September 2025 Al-Babtain Power & Telecommunication Co. Manufacturing Cairo, Egypt — Unknown Source

Ransomnews coverage of The Gentlemen

  • Confirmed ransomware attacks, October 2026: 25 verified so far, Everest and The Gentlemen lead
  • The Gentlemen after the leak: 654 listings since May
  • The Gentlemen list KFC, MoneyGram, Deloitte and Confluent
  • Confirmed ransomware attacks, September 2026: 55 verified so far, Qilin and The Gentlemen lead
  • The Gentlemen weaponised a Kontron driver to kill EDR

Claimed vs confirmed. The figures above the fold on this page come from The Gentlemen's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,747 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.