We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1084 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1084 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-11-03 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 242 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1084 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 17 1.6%
  • Pending 1067 98.4%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 5h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 5h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (21)

    Victims (1084)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 1084.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware MKG Kirchrode id36136 View details Germany Services pending
    Ransomware European Motorcars id36090 View details Germany Transportation / Travel / Logistics pending
    Ransomware Mitsubishi Motors Ukraine id36091 View details Ukraine Manufacturing / Engineering pending
    Ransomware Customs Support id36088 View details United Kingdom null pending
    Ransomware MegChem id36089 View details United States Manufacturing / Engineering pending
    Ransomware Five Star Plating id36081 View details United States Manufacturing / Engineering pending
    Ransomware Secretaria de Estado de Saúde id36082 View details Brazil Public Sector pending
    Ransomware Logsytech Group id36083 View details India IT pending
    Ransomware Antwerp House Dental id36084 View details Belgium Healthcare / Pharma pending
    Ransomware Barking Shopfronts id36080 View details United Kingdom Retail / E-commerce pending
    Ransomware Neighborhood House Association id36076 View details United States NGOs / Associations pending
    Ransomware TransLogWest id36077 View details United States Transportation / Travel / Logistics pending
    Ransomware Pages Asociados id36078 View details Venezuela, Bolivarian Republic of IT pending
    Ransomware HighTec id36079 View details Switzerland IT pending
    Ransomware Academy of the Sacred Heart id36074 View details United States null pending
    Ransomware Airdrie Christian Academy id36075 View details Canada Education pending
    Ransomware Solutis Tecnologias id36069 View details Spain IT pending
    Ransomware KABS Pharmaceutical Services id36070 View details United Kingdom Healthcare / Pharma pending
    Ransomware RedBlink Technologies id36064 View details United States IT pending
    Ransomware Lighting Direct id36065 View details United States Retail / E-commerce pending
    Ransomware Hausarztpraxis Ries id36066 View details Germany Healthcare / Pharma pending
    Ransomware McEwan Fraser Legal id36067 View details Canada Finance / Legal / Insurance pending
    Ransomware Grupo Lorrio id36068 View details Spain null pending
    Ransomware Labatec id36062 View details Peru Manufacturing / Engineering pending
    Ransomware Coemi Imóveis id36063 View details Brazil Construction / Real Estate pending
    Ransomware CommTank id35962 View details United States IT pending
    Ransomware Ined id35961 View details United States IT pending
    Ransomware NOVADATA id35960 View details Argentina IT pending
    Ransomware Spontini id35919 View details Italy Services pending
    Ransomware Serit CC id35914 View details Thailand Services pending
    Ransomware Marie Kruses Skole id35915 View details United States Education leaked
    Ransomware United Rolls id35916 View details United States Manufacturing / Engineering pending
    Ransomware Pac Production id35917 View details Sweden null pending
    Ransomware Zehren and Associates id35918 View details United States Services pending
    Ransomware ASL İnsaat id35911 View details Türkiye Services pending
    Ransomware Surexport id35912 View details United States Transportation / Travel / Logistics pending
    Ransomware Northwest Micro Systems id35913 View details United States IT pending
    Ransomware Epic Health id35907 View details United States Services pending
    Ransomware Incomelec id35908 View details United States IT pending
    Ransomware WIKA Beton id35902 View details Germany Manufacturing / Engineering pending
    Ransomware StarImage id35903 View details United States Services pending
    Ransomware Grupo Sanirent id35904 View details Mexico null pending
    Ransomware Farmacias 911 id35905 View details Brazil Healthcare / Pharma pending
    Ransomware SoftwareOne id35906 View details United States IT pending
    Ransomware Belmont Resorts id35898 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware Atlas Stamping Manufacturing id35901 View details United States Manufacturing / Engineering pending
    Ransomware EPMMOP id35900 View details Ecuador Other pending
    Ransomware Pure Perfection id35899 View details United States Other pending
    Ransomware Zinkan Enterprises id35897 View details United States Other pending
    Ransomware WABAG id35892 View details Philippines Services pending
    Ransomware Unisa Shoes id35893 View details Brazil Retail / E-commerce leaked
    Ransomware Acodafe id35894 View details United States IT pending
    Ransomware Malmsten id35896 View details Sweden IT pending
    Ransomware Betopia Group id35895 View details United States Other pending
    Ransomware Groupe AC Environnement id35889 View details France Services pending
    Ransomware SAP id35890 View details Germany IT pending
    Ransomware Trade Union Co id35888 View details United States NGOs / Associations pending
    Ransomware Lydenburg Toyota id35891 View details South Africa Retail / E-commerce pending
    Ransomware SOME id35887 View details Italy IT pending
    Ransomware Grundbaulabor Trier id35882 View details Germany Manufacturing / Engineering pending
    Ransomware Rexville Radiology id35883 View details United States Healthcare / Pharma pending
    Ransomware SuperScale id35884 View details United States IT pending
    Ransomware Mercantile Investment Corporation Bolivia S A id35885 View details Bolivia, Plurinational State of Finance / Legal / Insurance pending
    Ransomware Mann Group id35886 View details United States Services pending
    Ransomware FPT Software id35875 View details Viet Nam IT pending
    Ransomware Bi Link id35876 View details United States IT pending
    Ransomware Eichstatt id35877 View details Germany null pending
    Ransomware ImmoVia Hausverwaltung id35879 View details Germany Services pending
    Ransomware Regency Park Oak Knoll id35878 View details United States Other pending
    Ransomware Cherry Bekaert id35870 View details United States Services pending
    Ransomware SK Capital Partners id35871 View details United States Finance / Legal / Insurance pending
    Ransomware Svedala Kommun id35872 View details Sweden Services pending
    Ransomware Angeles Contractor id35873 View details United States Construction / Real Estate pending
    Ransomware First Dental id35874 View details United States Healthcare / Pharma pending
    Ransomware GIO Dental id35869 View details United States Healthcare / Pharma pending
    Ransomware Weld Re 8 School District id35525 View details United States Manufacturing / Engineering pending
    Ransomware Red Oak Technologies id35526 View details United States IT pending
    Ransomware Penco Products id35527 View details United States Manufacturing / Engineering pending
    Ransomware Conax Technologies id35528 View details Norway IT pending
    Ransomware Wellington College International School Bangkok id34941 View details Thailand Education leaked
    Ransomware Gio Dental Med Spa id34942 View details Italy Healthcare / Pharma — pending
    Ransomware First Dental Health id34943 View details United States Healthcare / Pharma — pending
    Ransomware AirQ id34945 View details Andorra Communication / Marketing — pending
    Ransomware Martin LLP id34532 View details United Kingdom Services — pending
    Ransomware MAP SA id34533 View details Switzerland IT — pending
    Ransomware Suhai Segurana Pessoal id34534 View details Brazil Services — pending
    Ransomware SBI Audiovisual Medinbox id34535 View details Spain IT — pending
    Ransomware Saga University id34536 View details Japan Education — pending
    Ransomware Netcore Unbxd id34537 View details India IT — pending
    Ransomware REGiO Nord id34538 View details Germany Manufacturing / Engineering — pending
    Ransomware Museum Siam id34539 View details Thailand Education — pending
    Ransomware Skin Center id34540 View details United States Healthcare / Pharma — pending
    Ransomware Thai Ha PCL KASET id34541 View details Thailand Retail / E-commerce — pending
    Ransomware Inovar Packaging Group id34542 View details Australia Manufacturing / Engineering — pending
    Ransomware Engineers Ireland id34543 View details Ireland Manufacturing / Engineering — pending
    Ransomware North Bridge Venture Partners id34544 View details United States IT — leaked
    Ransomware SONGWOOI id34545 View details Korea, Republic of Retail / E-commerce — pending
    Ransomware Petroleum Telcom Communications id34546 View details Pakistan Telecommunications — pending
    Ransomware Axle Logistics id34547 View details United States Transportation / Travel / Logistics — pending
    Ransomware CAS Paper Mill id34549 View details Canada Manufacturing / Engineering — pending