Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 786 published victims and 1 known leak locations in a single intelligence view.
Overview
Thegentlemen is tracked by Breach House as a ransomware group with 786 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (786)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 786.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Advanced Marketing id30859 View details | Mexico | Communication / Marketing | — | |
|
Advmkt.com.mx is a marketing company based in Mexico, operating in the communication and marketing sector. The company likely provides various marketing services to its clients. Advmkt.com.mx was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Advanced Marketing id30859 View details | Mexico | Communication / Marketing | — | |
|
advmkt.com.mx zoominfo.com/c/advanced-marketing/546978407 Advanced Marketing is one of Mexico's largest book distribution and publishing companies, founded in 1994. It partners with around 70 national and international publishing houses to supply major retail chains like Gandhi and Porrúa. Additionally, it operates "AMS Libros," an online store selling a wide variety of children's, art, culture, and health books. |
|||||
| Ransomware | European Design id30780 View details | Canada | Retail / E-commerce | — | |
|
European Design is a Canadian company operating in the retail and e-commerce sector. The company is based in Canada and offers various products and services to its customers. European Design was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | European Design id30780 View details | Canada | Retail / E-commerce | — | |
|
***.ca zoominfo.com/c/european-design/365524802 European Design Jewellery Ltd is a Toronto-based wholesale supplier serving jewellers and manufacturers across Canada. They specialize in providing a wide range of genuine and synthetic gemstones, jewellery findings, diamonds, and finished pieces. Additionally, the company supplies professional jewellery-making equipment and tools, acting as an exclusive Canadian distributor for several industry brands |
|||||
| Ransomware | MK Jewelry id30781 View details | North Macedonia | Retail / E-commerce | — | |
|
mkjewel.com is an e-commerce platform operating in the retail sector, based in the country of MK, offering various products to its customers. As an online retailer, mkjewel.com provides a range of services to facilitate transactions and engage with its customer base. mkjewel.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | MK Jewelry id30781 View details | North Macedonia | Retail / E-commerce | — | |
|
***.com zoominfo.com/c/mk-jewelry-inc/346982894 MK Jewelry, Inc. is a fine jewelry manufacturing and distribution company based in Midtown Manhattan, established in 1986. They specialize in producing and supplying a wide range of jewelry, including bridal and bridge collections. The company serves both independent and major retailers across the US, Canada, and the Caribbean. As a premier industry supplier, they offer extensive private label and branded diamond jewelry lines |
|||||
| Ransomware | GUERREIROS seguros id30782 View details | Portugal | Retail / E-commerce | — | |
|
Guerreiros.pt operates in the retail and e-commerce sector in Portugal, offering various products and services to its customers. As an e-commerce company, it provides online shopping experiences. Guerreiros.pt was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | GUERREIROS seguros id30782 View details | Portugal | Retail / E-commerce | — | |
|
***.pt zoominfo.com/c/guerreiros-seguros/483718773 GUERREIROS Seguros is a professional insurance mediation company based in Faro, Portugal, operating since 1990 and officially licensed as a mediator since 1994. They specialize in a wide range of insurance solutions, including auto, health, and life insurance. With over 30 years of experience, the company focuses on helping clients manage their policies, secure competitive rates, and ensure transparent, up-to-date coverage tailored to their specific needs |
|||||
| Ransomware | Tikona Infinet id30783 View details | India | Telecommunications | — | |
|
Tikona.in is a telecommunications company based in India, offering various services to its customers. The company operates in the telecommunications sector, providing essential services to individuals and businesses across the country. Tikona.in was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Tikona Infinet id30783 View details | India | Telecommunications | — | |
|
***.in rocketreach.co/tikona-profile_b5c0d28cf42e0851 Tikona Infinet Private Limited is a prominent Indian telecommunications company based in Mumbai, established in 2008. They specialize in providing high-performance wireless broadband connectivity and advanced cloud solutions. The company serves a diverse client base, including residential homes, small businesses, and large enterprises across India, with a focus on delivering reliable next-generation internet service |
|||||
| Ransomware | TC Printing id30784 View details | Australia | Manufacturing / Engineering | — | |
|
tcprinting.com.au is an Australian company operating in the manufacturing and engineering sector. The company is based in Australia and provides various services related to printing. tcprinting.com.au was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | TC Printing id30784 View details | Australia | Manufacturing / Engineering | — | |
|
***.com.au zoominfo.com/c/tc-printing/369208765 TC Printing Australia Pty Ltd is a commercial printing and communications company based in Scoresby, Victoria, Melbourne. Established in the mid-1980s, it specializes in a comprehensive range of printing services, including offset, digital, and point-of-sale materials. The company serves diverse clients across the advertising and marketing industries, providing end-to-end solutions from graphic design to large-scale event printing |
|||||
| Ransomware | Oldelval Oleoductos del Valle id30785 View details | Argentina | Energy | — | |
|
Oldelval.com is an Argentine company operating in the energy sector, providing various services to the industry. The company's offerings likely include energy-related solutions, given its sector classification. Oldelval.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Oldelval Oleoductos del Valle id30785 View details | Argentina | Energy | — | |
|
***.com zoominfo.com/c/oleoductos-del-valle-sa/456337922 Oldelval (Oleoductos del Valle S.A.) is a leading Argentine midstream energy company specializing in the transportation of liquid hydrocarbons. Based in Cipolletti, Río Negro, it transports over 50% of the oil produced in Argentina and approximately 80% of the oil from the Neuquén Basin. With over 60 years of history, the company focuses on sustainable operations, safety, and infrastructure maintenance, having recently extended its national concession until 2037. |
|||||
| Ransomware | Decoupe Laser Services id30786 View details | France | Manufacturing / Engineering | — | |
|
Dls-laser.com is a company based in France, operating in the manufacturing and engineering sector. The company likely provides laser-related products or services, given its name. Dls-laser.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Decoupe Laser Services id30786 View details | France | Manufacturing / Engineering | — | |
|
***.com DLS (Découpe Laser Services) is a French laser cutting specialist based in La Ravoire, specializing in precision laser cutting of steel, stainless steel, and aluminum. The company offers comprehensive metal finishing services including deburring, bending, surface treatment, tapping, and milling. With large-format cutting capabilities (6000mm x 2000mm) and over 200 tons of material stock, DLS handles everything from prototypes to very large industrial production runs. They pride themselves on reactivity and flexibility, providing quotes within 24 hours. |
|||||
| Ransomware | Thialf id30787 View details | Netherlands | Construction / Real Estate | — | |
|
Thialf.nl is a company based in the Netherlands, operating in the construction and real estate sector. The company likely provides various services related to construction and real estate development in the region. Thialf.nl was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Thialf id30787 View details | Netherlands | Construction / Real Estate | — | |
|
***.nl zoominfo.com/c/thialf/430686423 Thialf is a world-renowned ice arena located in Heerenveen, Netherlands, often referred to as the "Cathedral of Speed Skating." It serves as the home base for the Dutch national speed skating team and hosts a wide range of ice sports, including long track and short track speed skating, figure skating, and ice hockey. Recently, it was officially confirmed as the long-track speed skating venue for the 2030 Winter Olympics. The facility is celebrated for its modern, sustainable design and its role as a major hub for both elite professional competitions and public recreational skating. |
|||||
| Ransomware | Title Resources id30788 View details | Australia | Finance / Legal / Insurance | — | |
|
titleresourcesnt.com operates within the finance, legal, and insurance sector in Australia, providing various services to clients. As a finance sector entity, titleresourcesnt.com handles sensitive client information. titleresourcesnt.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Title Resources id30788 View details | Australia | Finance / Legal / Insurance | — | |
|
***.com zoominfo.com/c/title-resources-llc/1137777688 Title Resources is a locally owned title company based in Denton, Texas, founded in 1989. They specialize in real estate transactions, comprehensive title searches, and title insurance across North Texas, including Denton, Dallas, and Collin counties. Their team of fully trained professional title officers thoroughly examines each property to identify and resolve any title issues, ensuring secure and smooth real estate closings |
|||||
| Ransomware | Clarke Radiology id30789 View details | Australia | Healthcare / Medicine | — | |
|
Clarkeradiology.com is a healthcare service provider based in Australia, offering medical imaging and radiology services. The company operates in the healthcare sector, providing essential medical services to patients. Clarkeradiology.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Clarke Radiology id30789 View details | Australia | Healthcare / Medicine | — | |
|
***.com zoominfo.com/c/clarke-medical-imaging-center/370367094 Clarke Radiology (Clarke Medical Imaging Center) is a well-established medical imaging facility based in Montreal, Quebec, with over 40 years of experience. They provide a comprehensive range of diagnostic imaging services, including X-rays, MRI, ultrasound, mammography, bone density scans, and cortisone injections. The center is recognized for its top-of-the-line technology, rapid reporting (within 4 hours), and strong commitment to patient safety and accredited care standards |
|||||
| Ransomware | SICSOE id30790 View details | France | IT | — | |
|
Sicsoe.fr is an IT company based in France, providing various services to its clients. The company operates in the IT sector, offering solutions to businesses in France. Sicsoe.fr was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | SICSOE id30790 View details | France | IT | — | |
|
***.fr zoominfo.com/c/sicsoe/359018881 SICSOE (Solution Vin Logistique) is a French wine logistics company based near Bordeaux, established in 1985. They provide comprehensive, customized logistics services for the wine industry, including winery operations, bottling, storage, and shipping. The company is recognized for its advanced technology ensuring full product traceability and its strong commitment to environmental and quality standards, including ISO 14001 certification |
|||||
| Ransomware | Gloria Maris Groupe id30791 View details | France | Other | — | |
|
Gloriamaris.com is a French entity operating in the other sector, providing various offerings. The company is based in France and caters to a specific audience. Gloriamaris.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Gloria Maris Groupe id30791 View details | France | Other | — | |
|
***.com zoominfo.com/c/gloria-maris-groupe/552388964 Gloria Maris is a premium aquaculture company based in France and Sardinia, specializing in the sustainable farming of high-quality fish. With facilities in Corsica, Côte d'Opale, Gravelines, and Sardinia, the company focuses on traceability, environmental respect, and controlled growth in natural marine ecosystems. They produce around 3,800 tons of responsibly farmed fish and 35 million fry annually, exporting their products to over 25 countries worldwide |
|||||
| Ransomware | Compagnie des Caoutchoucs du Pakidie id30792 View details | Other | — | ||
|
Pakidie.com is an entity operating in the other sector. The specifics of its location and offerings are not well-documented. Pakidie.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Compagnie des Caoutchoucs du Pakidie id30792 View details | Other | — | ||
|
***.com Compagnie des Caoutchoucs du Pakidié (CCP) is a pioneering Ivorian company established in 1960, specializing in the farming, production, and processing of natural rubber. Based in Abidjan, Côte d'Ivoire, it holds the historical distinction of being the country's first entirely private rubber enterprise and currently ranks as the second-largest national producer. The company is committed to sustainable practices, exporting its high-quality rubber to major international clients while prioritizing environmental and social responsibility. |
|||||
| Ransomware | Compagnie des Caoutchoucs du Pakidie id30792 View details | Côte d'Ivoire | Other | — | |
|
***.com Compagnie des Caoutchoucs du Pakidié (CCP) is a pioneering Ivorian company established in 1960, specializing in the farming, production, and processing of natural rubber. Based in Abidjan, Côte d'Ivoire, it holds the historical distinction of being the country's first entirely private rubber enterprise and currently ranks as the second-largest national producer. The company is committed to sustainable practices, exporting its high-quality rubber to major international clients while prioritizing environmental and social responsibility. |
|||||
| Ransomware | HBS Group id30793 View details | Australia | Construction / Real Estate | — | |
|
Hbsgroup.com.au is an Australian company operating in the construction and real estate sector, providing various services. The company is based in Australia and offers services related to construction and real estate. Hbsgroup.com.au was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | HBS Group id30793 View details | Australia | Construction / Real Estate | — | |
|
***.com.au zoominfo.com/c/hbs-group-pty-ltd/356757625 HBS Group is a privately owned Australian company specializing in heritage restoration, conservation, and remedial construction projects. Based in Alphington, Victoria, they have over 15 years of experience delivering complex construction and stonemasonry solutions nationwide. The company is recognized as an industry leader in preserving historical buildings and executing high-quality restoration work across major Australian cities |
|||||
| Ransomware | Agapit id30794 View details | Poland | IT | — | |
|
Agapit.pl is an IT company based in Poland, providing various IT services. The company operates in the IT sector, offering its services to clients in Poland. Agapit.pl was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Agapit id30794 View details | Poland | IT | — | |
|
***.pl zoominfo.com/c/agapit-sp-z-oo-spk/372573662 Agapit is one of the largest suppliers of professional cleaning technology and equipment in Poland, with over 26 years of experience. The company provides comprehensive solutions, including industrial cleaning machines, robotic scrubbers, high-pressure washers, and specialized cleaning chemicals. They operate their own nationwide distribution, rental, and service network, with key locations in cities like Olsztyn, Wroclaw, and Gdynia |
|||||
| Ransomware | Raben Group id30795 View details | Poland | Transportation / Travel / Logistics | — | |
|
Raben Group is a European logistics and transportation company based in Poland, offering a range of services including freight forwarding, warehousing, and supply chain management. The company operates in various sectors, providing tailored solutions to its customers. Raben Group was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Raben Group id30795 View details | Poland | Transportation / Travel / Logistics | — | |
|
***.com zoominfo.com/c/raben-group/350966506 Raben Group is a leading European logistics provider with Dutch roots, founded in 1931 and currently headquartered in Poznań, Poland. The company offers comprehensive transport and warehousing solutions, including road transport, contract logistics, and supply chain management across 17 European countries. With over 90 years of experience and a workforce of approximately 12,200 employees, Raben Group is recognized as a market leader focused on sustainable and efficient logistics operations |
|||||
| Ransomware | Henry Frerk Sons id30796 View details | United States | Manufacturing / Engineering | — | |
|
Hfsmaterials.com operates in the manufacturing and engineering sector, providing services and products in the United States. As a company in this sector, it likely offers a range of materials and solutions for various industrial applications. Hfsmaterials.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Henry Frerk Sons id30796 View details | United States | Manufacturing / Engineering | — | |
|
***.com zoominfo.com/c/henry-frerk-sons-inc/44255454 Henry Frerk Sons (HFS Materials) is a premier masonry and plaster restoration supplier based in the Chicago region, with over 140 years of history. They specialize in custom matching and blending of historic mortars, concrete, and stone patching materials, alongside offering on-site volumetric ready-mix concrete services. The company provides a comprehensive range of building materials, including natural hydraulic lime, specialized cleaners, sealers, and preblended mortars for both historic preservation and new construction projects |
|||||
| Ransomware | SMRTR id30797 View details | United States | IT | — | |
|
Smrtrsolutions.com operates in the IT sector in the United States, providing various technology solutions. As an IT company, smrtrsolutions.com likely offers services such as software development, consulting, and support. Smrtrsolutions.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | SMRTR id30797 View details | United States | IT | — | |
|
***.com rocketreach.co/s4i-systems-profile_b5c16403f42e08fa SMRTR is a document and workflow automation company with over 20 years of experience, specializing in ERP-driven industries such as manufacturing, food & beverage, and distribution. They provide cloud-based solutions for document management, accounts payable automation, and supplier regulatory compliance. Operating as a remote-first, environmentally conscious organization, SMRTR focuses on seamless integration with existing financial and operational systems to improve efficiency and reduce manual tasks. |
|||||
| Ransomware | DayNDay id30798 View details | India | Retail / E-commerce | — | |
|
Daynday.co.in is an e-commerce company based in India, operating in the retail sector. The company offers various products and services to its customers. Daynday.co.in was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | DayNDay id30798 View details | India | Retail / E-commerce | — | |
|
***.co.in zoominfo.com/c/daynday/459254692 Day 'N' Day Services Private Limited is a leading integrated facility management company based in Chennai, India, established in 1987. They provide comprehensive facility management and business support services, including logistics, warehouse management, and maintenance solutions. With operations spanning across multiple locations in India and a large workforce, the company serves diverse sectors such as banking, insurance, and corporate enterprises |
|||||
| Ransomware | Affinity Designs id30799 View details | United States | Construction / Real Estate | — | |
|
Affinity Designs LLC is a company operating in the construction and real estate sector in the United States. The company likely provides design services to clients in the construction and real estate industries. Affinity Designs LLC was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Affinity Designs id30799 View details | United States | Construction / Real Estate | — | |
|
***.com zoominfo.com/c/affinity-designs/374939106 Affinity Designs LLC is a fine jewelry wholesaler and manufacturer based in New York, specializing in the design, production, and marketing of elegant gemstone jewelry collections. The company offers a wide range of high-quality pieces crafted in 925 Sterling Silver and 10K, 14K, or 18K gold. Led by CEO Meir Sanandaji, who brings over 40 years of industry experience, the business caters to retailers seeking premium, trend-forward jewelry lines |
|||||
| Ransomware | Lenrose id30800 View details | Singapore | Other | — | |
|
Lenrose.com is a Singapore-based entity operating in the other sector. The company is based in Singapore and provides various offerings. Lenrose.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Lenrose id30800 View details | Singapore | Other | — | |
|
***.com zoominfo.com/c/lenrose-pty-ltd/551499069 Lenrose & Ace David Jewellery is a premier jewellery manufacturing and casting company based in Melbourne, Australia. They specialize in precious metal casting (gold, platinum, silver, and bronze), CAD services, and the production of hand-made chain products. As a full-service, multi-faceted manufacturing facility, they utilize cutting-edge technology to bring custom jewellery designs to life for their clients |
|||||
| Ransomware | Lenrose id30800 View details | Australia | Other | — | |
|
***.com zoominfo.com/c/lenrose-pty-ltd/551499069 Lenrose & Ace David Jewellery is a premier jewellery manufacturing and casting company based in Melbourne, Australia. They specialize in precious metal casting (gold, platinum, silver, and bronze), CAD services, and the production of hand-made chain products. As a full-service, multi-faceted manufacturing facility, they utilize cutting-edge technology to bring custom jewellery designs to life for their clients |
|||||
| Ransomware | Velum id30801 View details | IT | — | ||
|
Velum.biz operates in the IT sector, providing various services. The company's specific offerings and location are not publicly disclosed. Velum.biz was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Velum id30801 View details | IT | — | ||
|
***.biz zoominfo.com/c/velum-inc/372599932 We are making some files publicly available. We have hundreds of gigabytes of your files, including database projects, client contracts, personal data, and documents. If you do not want to face the consequences of a data breach, please contact us; otherwise, everything will be published. VELUM is a French manufacturer of professional lighting solutions based in Bischoffsheim, Alsace, operating since 1975. The company specializes in designing, developing, and manufacturing custom LED lighting fixtures for both indoor and outdoor environments. As a family-owned business, VELUM provides comprehensive support, including lighting studies, technical advice, and tailored solutions for professionals across various sectors |
|||||
| Ransomware | Ceska filharmonie id30802 View details | Czechia | Services | — | |
|
Ceskafilharmonie.cz is a Czech-based entity operating in the services sector, likely providing various offerings to its clients. The services sector encompasses a broad range of industries, including financial, professional, and personal services. Ceskafilharmonie.cz was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Ceska filharmonie id30802 View details | Czechia | Services | — | |
|
***.cz zoominfo.com/c/esk-filharmonie/1100523885 The Czech Philharmonic (Česká filharmonie) is one of the world's most renowned symphony orchestras, based in Prague, Czech Republic. It gave its first independent concert on January 4, 1896, under the baton of Antonín Dvořák, and has been resident at the historic Rudolfinum concert hall for over a century. The orchestra is globally celebrated for its authentic and masterful interpretations of Czech composers such as Dvořák, Smetana, and Janáček. Currently, the ensemble is led by Chief Conductor and Music Director Semyon Bychkov, continuing its legacy of artistic excellence and international touring. |
|||||
| Ransomware | Herbahaz id30803 View details | Hungary | Agriculture / Food | — | |
|
Herbahaz.hu is a Hungarian entity operating in the agriculture and food sector. The company is based in Hungary and likely provides products or services related to this industry. Herbahaz.hu was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Herbahaz id30803 View details | Hungary | Agriculture / Food | — | |
|
***.hu zoominfo.com/c/bennovum-kft/535573660 Herbaház is a Hungarian health and wellness specialty retail chain operating multiple stores nationwide alongside an online shop. The company specializes in dietary supplements, medicinal herbs, vitamins, and a wide range of organic, vegan, and "free-from" health foods. Their mission is to promote conscious, healthy living by providing a comprehensive, one-stop destination for natural health products and wellness solutions. |
|||||
| Ransomware | vpcgroup.com customfoam.com id30804 View details | United States | Manufacturing / Engineering | — | |
|
Customfoam.com is a US-based company operating in the manufacturing and engineering sector, providing custom foam solutions. The company's offerings cater to various industries, leveraging its expertise in foam technology. Customfoam.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | vpcgroup.com customfoam.com id30804 View details | United States | Manufacturing / Engineering | — | |
|
***.com vpcgroup.com zoominfo.com/c/custom-foam-systems-ltd/31526090 Custom Foam Systems (CFS) is a leading Canadian manufacturer of fabricated and molded custom polyurethane foam components, founded in 1973 and based in Kitchener, Ontario. The company specializes in serving the automotive, healthcare, and furniture industries across North America with over 45 years of manufacturing excellence. CFS operates under ISO 9001:2015 and FDA standards, utilizing advanced product development processes and lean manufacturing systems to deliver exceptional quality and on-time performance. As a family-owned business, they have built a strong reputation for innovation, reliability, and their commitment that "every component matters." |
|||||
| Ransomware | Optiforms id30805 View details | United States | IT | — | |
|
Optiforms.com is an IT company based in the United States, providing various services within the IT sector. As an IT company, optiforms.com likely offers solutions and support to its clients. Optiforms.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Optiforms id30805 View details | United States | IT | — | |
|
***.com zoominfo.com/c/optiforms-inc/67340558 Optiforms, Inc. is a precision manufacturing company based in Temecula, California, specializing in electroforming, CNC machining, and enhanced surface finishes. Founded in 1984, the company produces custom metal components and high-performance optical coatings for demanding applications. They primarily serve the aerospace, defense, medical, semiconductor, and specialty lighting sectors with advanced, vertically integrated manufacturing solutions. |
|||||
| Ransomware | MatTek id30806 View details | United States | IT | — | |
|
Mattek.com is an IT company based in the United States, providing various IT services. The company operates in the IT sector, offering services to clients in the US. Mattek.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | MatTek id30806 View details | United States | IT | — | |
|
***.com zoominfo.com/c/mattek-corp/109184324 MatTek Corporation is a pioneering biotechnology company founded in 1985 and headquartered in Ashland, Massachusetts, specializing in the development of innovative in vitro 3D reconstructed human tissue models. They produce advanced microtissues and cell culture products that are widely used by researchers to accelerate drug development, conduct toxicity testing, and replace traditional animal testing. Originally an independent leader in tissue engineering, the company was recently acquired by the global life science supplier Sartorius and now operates as a key part of their advanced biological models portfolio |
|||||
| Ransomware | Conecsus id30807 View details | United States | IT | — | |
|
ConecSus LLC is an IT company based in the United States, providing various IT services. The company operates within the IT sector, offering solutions to its clients. ConecSus LLC was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Conecsus id30807 View details | United States | IT | — | |
|
***.com zoominfo.com/c/conecsus-llc/358895914 Conecsus LLC is a global "green" metals recycler and refiner founded in 1980 and headquartered in Terrell, Texas. The company specializes in processing complex industrial residues and electronic wastes, particularly those containing tin, lead, silver, gold, and copper, such as SMT solder and solder paste wastes. Recognized as the largest secondary tin-lead recycler in the Western Hemisphere, Conecsus converts these materials into reusable metal products using state-of-the-art technology. |
|||||
| Ransomware | Wunschkind Klinik Dr Brunbauer id30808 View details | Austria | Healthcare / Medicine | — | |
|
Wunschkind.at is an Austrian entity operating in the healthcare and medicine sector, providing services in Austria. The company's offerings are focused on healthcare. Wunschkind.at was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Wunschkind Klinik Dr Brunbauer id30808 View details | Austria | Healthcare / Medicine | — | |
|
***.at zoominfo.com/c/wunschkind-klinik-dr-brunbauer/1320140781 We have hundreds of gigabytes of your files, including database projects, client contracts, personal data and documents, medical data, medical histories, treatment records, medical reports, and more—all of which constitute critically important information. If you do not want to face the consequences of a data breach, please contact us; otherwise, everything will be published. fertility clinic in Vienna, Austria, led by Dr. Brunbauer. Located in the city center, the clinic specializes in fertility treatments including IVF, insemination, diagnostics, hormone therapy, egg donation, and cryopreservation. It is a recognized partner clinic of Austria's IVF-Fonds program. |
|||||
| Ransomware | Sirl id30764 View details | Portugal | IT | — | |
|
sirl.pt is a Portuguese IT company providing various services. Located in Portugal, the company operates within the IT sector, offering a range of solutions. sirl.pt was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Sirl id30764 View details | Portugal | IT | — | |
|
***.pt zoominfo.com/c/sirl/372746430 Portuguese manufacturing company founded in 1988 and headquartered in Penela, Coimbra. It specializes in producing and selling machinery and tools for the civil construction industry.Their flagship products are concrete mixers, complemented by various other construction equipment and welding tools. The company employs 51–200 people and is a recognized supplier in the European construction machinery sector |
|||||
| Ransomware | Disney Family id30765 View details | United States | Finance / Legal / Insurance | — | |
|
Shamrock.com operates in the finance, legal, and insurance sector in the United States, providing various services to its clients. As a financial services provider, shamrock.com likely handles sensitive client information. Shamrock.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Disney Family id30765 View details | United States | Finance / Legal / Insurance | — | |
|
This critical data breach involves Disney Family / Shamrock Holdings, the private investment firm and family office established by Roy E. Disney to manage the wealth of the Disney family branch, rather than the public Walt Disney Company. The compromised dataset, totaling over 800 GB and spanning from the 1980s to June 2026, exposes highly sensitive information across 14 critical categories, including family trusts, tax administration, and private equity fund management. Key victims include prominent figures such as Abigail Disney, Roy P. Disney, and Stanley Gold, whose personal financial records, passports, and KYC documents were leaked alongside detailed trust instruments for the "Disney Grandchildren Trusts." The breach reveals active operational data, including recent payroll records, bank reconciliations with CNB, and subscription agreements for funds like the Shamrock Israel Growth Fund. With unencrypted databases, embedded ERP credentials etc.. |
|||||
| Ransomware | Ecopetrol id30672 View details | Colombia | Energy | — | |
|
Ecopetrol is the largest company in Colombia and a main player in the country's energy sector, primarily involved in the exploration, production, and refining of petroleum products. As a major energy company, Ecopetrol provides a range of services and offerings related to the energy industry. Ecopetrol was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Ecopetrol id30672 View details | Colombia | Energy | — | |
|
$33.1 Billion. www.***.com.co ECOPETROL copetrol SA is a company organized as a public limited company, of national order, linked to the Ministry of Mines and Energy. It has operations located in the center, south, east and north of Colombia, as well as abroad. It has two refineries in Barrancabermeja and Cartagena. Through its subsidiary Cenit, specialized in hydrocarbon transportation and logistics, it owns three ports for the export and import of fuels and crude oil in Coveñas (Sucre) and Cartagena (Bolvar) with access to the Atlantic, and Tumaco (Nariño) on the Pacific. Cenit also owns most of the country's oil and multi-purpose pipelines that connect production systems with large consumption centers and maritime terminals. Ecopetrol also has a stake in the biofuels business and is present in Brazil, Mexico and the United States (Gulf of Mexico and Permian Texas). 1TB+ Stock Symbol = ECOPETROL |
|||||
| Ransomware | Military Sealift Command id30646 View details | United States | Transportation / Travel / Logistics | — | |
|
Sealiftcommand.com is a US-based company operating in the transportation and logistics sector, providing services to support the movement of goods and supplies. The company's offerings cater to the needs of various industries, including travel and logistics. Sealiftcommand.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Military Sealift Command id30646 View details | United States | Transportation / Travel / Logistics | — | |
|
***.com zoominfo.com/c/military-sealift-command/149045906 We attempted to contact the managers regarding the leaked documents (ITAR documentation, personal data, cargo manifests—including ESSM shipments—vessel blueprints, and both disclosed and undisclosed information)/ We managed to reach only Jennifer Miller , Todd Phillips and Dain Costlow However, these individuals dismissed the entire matter as a joke, ignoring all warnings about leaks and the importance of internal documents, and refused to provide any contact details for anyone authorized to handle such issues or to pass the information on to management, despite the availability of conclusive evidence. If you do not get in touch in the near future, the data will be published. |
|||||
| Ransomware | Advantage Home Health Care id30647 View details | United States | Healthcare / Medicine | — | |
|
AdvantageHHc is a healthcare company based in the US, operating in the medicine sector. The company provides various healthcare services. AdvantageHHc was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Advantage Home Health Care id30647 View details | United States | Healthcare / Medicine | — | |
|
***.com zoominfo.com/c/advantage-home-health-care-inc/357944466 Advantage Home Health Care, a leading Indiana-owned provider of in-home care services with over 30 years of experience.The company operates multiple locations across Indiana, serving dozens of counties with post-procedure recovery and long-term home assistance. |
|||||
| Ransomware | Sunway Scientific id30648 View details | Taiwan, Province of China | Manufacturing / Engineering | — | |
|
Sun-way.com.tw is a company based in Taiwan, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Sun-way.com.tw was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Sunway Scientific id30648 View details | Taiwan, Province of China | Manufacturing / Engineering | — | |
|
***.com.tw zoominfo.com/c/sunway-scientific-corp/456158414 SUNWAY Co., Ltd., a leading Taiwanese distributor and exclusive agent for international scientific and laboratory equipment brands (such as HETTICH, EYELA, JASCO, and SHASHIN KAGAKU). The company specializes in providing advanced laboratory solutions, including centrifuges, freeze dryers, spectrometers, and cell disruptors for research, biotech, and chemical industries. |
|||||
| Ransomware | Tangram Interiors id30614 View details | United Kingdom | Construction / Real Estate | — | |
|
Tangram Interiors is a company based in the United Kingdom, operating in the construction and real estate sector. The company provides interior design and fit-out services. Tangram Interiors was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Tangram Interiors id30614 View details | United Kingdom | Construction / Real Estate | — | |
|
www.***.com Revenue $245.1 Million Founded in 1963, At Tangram Interiors, we've spent decades transforming spaces to inspire and empower. As industry leaders, our reputation stands on top-notch craftsmanship and innovative design. Tangram Interiors is a prominent commercial interior solutions provider and Steelcase dealer, specializing in integrated workspaces, including furniture, technology, and design. Serving Southern California, the Central Valley, and Texas, the firm offers comprehensive services ranging from space planning to custom, bespoke furniture solutions. Client pesonal data included. 400+gb |
|||||
| Ransomware | Tangram Interiors id30614 View details | United States | Construction / Real Estate | — | |
|
www.***.com Revenue $245.1 Million Founded in 1963, At Tangram Interiors, we've spent decades transforming spaces to inspire and empower. As industry leaders, our reputation stands on top-notch craftsmanship and innovative design. Tangram Interiors is a prominent commercial interior solutions provider and Steelcase dealer, specializing in integrated workspaces, including furniture, technology, and design. Serving Southern California, the Central Valley, and Texas, the firm offers comprehensive services ranging from space planning to custom, bespoke furniture solutions. Client pesonal data included. 400+gb |
|||||
| Ransomware | BRAC id30615 View details | Bangladesh | NGOs / Associations | — | |
|
BRAC is one of the largest non-governmental organizations in Bangladesh, working in various sectors including education, healthcare, and economic empowerment. The organization provides a range of services and support to vulnerable communities across the country. BRAC was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | BRAC id30615 View details | Bangladesh | NGOs / Associations | — | |
|
***.net zoominfo.com/c/brac-centre/8079683 is the largest non-governmental development organization in the world, founded in Bangladesh in 1972.Its mission is to empower communities facing poverty, illiteracy, disease, and social injustice.Today, it operates across multiple countries, reaching over 145 million people annually through programs in education, healthcare, livelihood, and human rights |
|||||
| Ransomware | Customs Watch id30616 View details | United States | Retail / E-commerce | — | |
|
Customswatch.com is an e-commerce company operating in the retail sector in the United States, offering various products to its customers. As a retail company, it provides online shopping experiences. Customswatch.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Customs Watch id30616 View details | United States | Retail / E-commerce | — | |
|
***.com zoominfo.com/c/customs-watch/467458469 is an intelligence and IT consulting company specializing in anti-counterfeiting and product protection strategies throughout their lifecycle. The company primarily serves the pharmaceutical sector, working with 22 of the 25 largest pharmaceutical companies globally. Founded in 2001, it employs 51 to 200 people and is an active member of the International AntiCounterfeiting Coalition. |
|||||
| Ransomware | Gallant id30617 View details | Finland | IT | — | |
|
Gallant.fi is a Finland-based company operating in the IT sector, providing various services to its clients. The company's offerings likely include IT consulting, software development, and other technology-related solutions. Gallant.fi was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Gallant id30617 View details | Finland | IT | — | |
|
***.fi zoominfo.com/c/gallant/474332534 is a forward-looking Finnish advisory and accounting company founded in 1967. It provides comprehensive financial, HR administration, taxation, and business law solutions for businesses of all sizes. The company operates in multiple locations across Finland, aiming to keep its clients one step ahead of their competition through modern financial management and strategic support |
|||||
| Ransomware | Hanseata id30618 View details | Germany | Finance / Legal / Insurance | — | |
|
Hanseata.de is a German company operating in the finance, legal, and insurance sectors, providing various financial services to its clients. Located in Germany, the company offers a range of services tailored to the needs of its customers. Hanseata.de was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Hanseata id30618 View details | Germany | Finance / Legal / Insurance | — | |
|
***.de traditional German flat glass wholesaler based near Hamburg, operating since 1953. The company specializes in supplying high-quality glass solutions, including vacuum glass, flat glass, and insulating glass, to commercial clients, architects, and construction firms worldwide. They are particularly known for their extensive stock capacity, specialized consulting for energy-efficient vacuum glazing, and comprehensive global logistics services |
|||||
| Ransomware | Metro Mondego id30595 View details | Portugal | Transportation / Travel / Logistics | — | |
|
Metromondego.pt is a transportation company operating in Portugal, specifically in the sector of travel and logistics. The company provides public transportation services, contributing to the country's infrastructure. Metromondego.pt was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Metro Mondego id30595 View details | Portugal | Transportation / Travel / Logistics | — | |
|
***.pt zoominfo.com/c/metro-mondego-sa/430685182 public transport company responsible for sustainable mobility in the Coimbra, Miranda do Corvo, and Lousã region of Portugal. Originally conceived as a light rail network, the project has been restructured into a fully electric, high-capacity Bus Rapid Transit system known as Metrobus. The network spans 42 kilometers with 42 dedicated stations and 35 electric buses, designed to provide efficient, eco-friendly, and integrated urban transportation for an estimated 13 million passengers annually |
|||||
| Ransomware | Comet Enterprise Corp id30596 View details | Taiwan, Province of China | Manufacturing / Engineering | — | |
|
Comet-bearing.com.tw is a company based in Taiwan, operating in the manufacturing and engineering sector. The company likely provides products and services related to bearing technology, given its name. Comet-bearing.com.tw was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Comet Enterprise Corp id30596 View details | Taiwan, Province of China | Manufacturing / Engineering | — | |
|
***.com.tw zoominfo.com/c/comet-enterprise-corp/425713239 leading Taiwanese industrial bearing distributor founded in 1973, serving as one of the major authorized distributors of the Schaeffler Group's FAG and INA brands in Taiwan. The company provides high-quality precision bearings for machine tools, power machinery, and equipment maintenance, backed by comprehensive factory technical support. With its headquarters in New Taipei City and branches across Taiwan, China, and Thailand, it offers extensive inventory and one-stop procurement solutions to help clients minimize equipment downtime and maintenance costs |
|||||
| Ransomware | Landesbibliothek Coburg id30597 View details | Germany | Education | — | |
|
Landesbibliothek Coburg is a public library located in Coburg, Germany, serving the local community with various educational resources and services. As part of the education sector in Germany, it provides access to a wide range of books, media, and other materials. Landesbibliothek Coburg was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Landesbibliothek Coburg id30597 View details | Germany | Education | — | |
|
***.de zoominfo.com/c/landesbibliothek-coburg/429940598 regional state scientific library in Bavaria, Germany, originally founded in 1547. Located in the historic Ehrenburg Palace in Coburg, it houses a vast collection of around 500,000 volumes, including rare manuscripts, incunabula, and the historical book collections of the former Dukes of Coburg. Since 1973, the library has been administered by the Free State of Bavaria, serving as a vital cultural and research institution dedicated to preserving the region's historical heritage |
|||||
| Ransomware | ALUFE Femszerkezeti Kft id30598 View details | Hungary | Manufacturing / Engineering | — | |
|
Alufe.hu is a Hungarian company operating in the manufacturing and engineering sector. The company is based in Hungary and provides various services and products related to its sector. Alufe.hu was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | ALUFE Femszerkezeti Kft id30598 View details | Hungary | Manufacturing / Engineering | — | |
|
***.hu zoominfo.com/c/alufe-fémszerkezeti-kft/452408141 Hungarian manufacturing and construction company based in Székesfehérvár, with a history of aluminum production dating back to 1968. The company specializes in manufacturing and installing aluminum windows, doors, curtain walls, and complex facade systems, including steel, glass, and ceramic structures. With around 150 employees, it provides comprehensive, high-quality metal structure solutions for commercial and architectural projects across the region |
|||||
| Ransomware | Tooltec id30599 View details | Sweden | Manufacturing / Engineering | — | |
|
Tooltec.se is a company based in Sweden, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Tooltec.se was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Tooltec id30599 View details | Sweden | Manufacturing / Engineering | — | |
|
***.se zoominfo.com/c/tooltec-ab/371817746 advanced manufacturing company based in Trollhättan, Sweden, specializing in the precision machining of complex components. The company utilizes technologies like 5-axis milling, turning, and Wire EDM to produce high-quality parts for the automotive, energy, aeronautical, and aerospace industries. As an ISO 9001 certified supplier, Tooltec is recognized for its strict quality standards, delivery reliability, and commitment to long-term partnerships with both clients and employees |
|||||
| Ransomware | Terra Vitis id30600 View details | France | Agriculture / Food | — | |
|
Terravitis.com operates in the agriculture and food sector in France, providing various offerings to its customers. As a company in this sector, it plays a role in the country's food production and distribution. Terravitis.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Terra Vitis id30600 View details | France | Agriculture / Food | — | |
|
***.com zoominfo.com/c/terra-vitis/447256156 French national certification for sustainable and responsible winegrowing, founded in 1998 by a group of committed Beaujolais winegrowers. It is the only national certification specifically dedicated to the wine sector and is officially recognized by the French Ministry of Agriculture and Food. The association unites nearly 2,000 members across France, guaranteeing environmentally friendly, socially responsible, and economically viable practices from vine to wine glass through strict annual audits |
|||||
| Ransomware | Vignobles Toutigeac id30601 View details | France | Other | — | |
|
Toutigeac.com is a French entity operating in the other sector, providing various offerings. Located in France, the entity is part of a diverse range of organizations in the country. Toutigeac.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Vignobles Toutigeac id30601 View details | France | Other | — | |
|
***.com zoominfo.com/c/vignobles-toutigeac/456813413 Vignobles Toutigeac family-run wine estate located in Targon, within the Bordeaux and Entre-Deux-Mers appellations in France. Originally an ecclesiastical property managed by monks, the estate now spans approximately 42 hectares of vineyards under the guidance of Oriane and Philippe Mazeau. The winery produces classic red and white Bordeaux wines, recognized for their smooth tannins and balanced fruit profiles, successfully blending historical tradition with modern winemaking practices |
|||||
| Ransomware | Dink Co Ltd id30602 View details | Japan | IT | — | |
|
Dink.co.jp is a Japanese company operating in the IT sector, providing various services and solutions. Located in Japan, the company is involved in the IT industry, offering a range of products and services. Dink.co.jp was listed as a ransomware victim associated with thegentlemen |
|||||