Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 786 published victims and 1 known leak locations in a single intelligence view.

Victims 786 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-07-25 Latest victim discovery date
Inactive since 3 days Days since the latest known victim
Top country United States 137 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 786 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (786)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 786.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Advanced Marketing id30859 View details Mexico Communication / Marketing
    Ransomware Advanced Marketing id30859 View details Mexico Communication / Marketing
    Ransomware European Design id30780 View details Canada Retail / E-commerce
    Ransomware European Design id30780 View details Canada Retail / E-commerce
    Ransomware MK Jewelry id30781 View details North Macedonia Retail / E-commerce
    Ransomware MK Jewelry id30781 View details North Macedonia Retail / E-commerce
    Ransomware GUERREIROS seguros id30782 View details Portugal Retail / E-commerce
    Ransomware GUERREIROS seguros id30782 View details Portugal Retail / E-commerce
    Ransomware Tikona Infinet id30783 View details India Telecommunications
    Ransomware Tikona Infinet id30783 View details India Telecommunications
    Ransomware TC Printing id30784 View details Australia Manufacturing / Engineering
    Ransomware TC Printing id30784 View details Australia Manufacturing / Engineering
    Ransomware Oldelval Oleoductos del Valle id30785 View details Argentina Energy
    Ransomware Oldelval Oleoductos del Valle id30785 View details Argentina Energy
    Ransomware Decoupe Laser Services id30786 View details France Manufacturing / Engineering
    Ransomware Decoupe Laser Services id30786 View details France Manufacturing / Engineering
    Ransomware Thialf id30787 View details Netherlands Construction / Real Estate
    Ransomware Thialf id30787 View details Netherlands Construction / Real Estate
    Ransomware Title Resources id30788 View details Australia Finance / Legal / Insurance
    Ransomware Title Resources id30788 View details Australia Finance / Legal / Insurance
    Ransomware Clarke Radiology id30789 View details Australia Healthcare / Medicine
    Ransomware Clarke Radiology id30789 View details Australia Healthcare / Medicine
    Ransomware SICSOE id30790 View details France IT
    Ransomware SICSOE id30790 View details France IT
    Ransomware Gloria Maris Groupe id30791 View details France Other
    Ransomware Gloria Maris Groupe id30791 View details France Other
    Ransomware Compagnie des Caoutchoucs du Pakidie id30792 View details Other
    Ransomware Compagnie des Caoutchoucs du Pakidie id30792 View details Other
    Ransomware Compagnie des Caoutchoucs du Pakidie id30792 View details Côte d'Ivoire Other
    Ransomware HBS Group id30793 View details Australia Construction / Real Estate
    Ransomware HBS Group id30793 View details Australia Construction / Real Estate
    Ransomware Agapit id30794 View details Poland IT
    Ransomware Agapit id30794 View details Poland IT
    Ransomware Raben Group id30795 View details Poland Transportation / Travel / Logistics
    Ransomware Raben Group id30795 View details Poland Transportation / Travel / Logistics
    Ransomware Henry Frerk Sons id30796 View details United States Manufacturing / Engineering
    Ransomware Henry Frerk Sons id30796 View details United States Manufacturing / Engineering
    Ransomware SMRTR id30797 View details United States IT
    Ransomware SMRTR id30797 View details United States IT
    Ransomware DayNDay id30798 View details India Retail / E-commerce
    Ransomware DayNDay id30798 View details India Retail / E-commerce
    Ransomware Affinity Designs id30799 View details United States Construction / Real Estate
    Ransomware Affinity Designs id30799 View details United States Construction / Real Estate
    Ransomware Lenrose id30800 View details Singapore Other
    Ransomware Lenrose id30800 View details Singapore Other
    Ransomware Lenrose id30800 View details Australia Other
    Ransomware Velum id30801 View details IT
    Ransomware Velum id30801 View details IT
    Ransomware Ceska filharmonie id30802 View details Czechia Services
    Ransomware Ceska filharmonie id30802 View details Czechia Services
    Ransomware Herbahaz id30803 View details Hungary Agriculture / Food
    Ransomware Herbahaz id30803 View details Hungary Agriculture / Food
    Ransomware vpcgroup.com customfoam.com id30804 View details United States Manufacturing / Engineering
    Ransomware vpcgroup.com customfoam.com id30804 View details United States Manufacturing / Engineering
    Ransomware Optiforms id30805 View details United States IT
    Ransomware Optiforms id30805 View details United States IT
    Ransomware MatTek id30806 View details United States IT
    Ransomware MatTek id30806 View details United States IT
    Ransomware Conecsus id30807 View details United States IT
    Ransomware Conecsus id30807 View details United States IT
    Ransomware Wunschkind Klinik Dr Brunbauer id30808 View details Austria Healthcare / Medicine
    Ransomware Wunschkind Klinik Dr Brunbauer id30808 View details Austria Healthcare / Medicine
    Ransomware Sirl id30764 View details Portugal IT
    Ransomware Sirl id30764 View details Portugal IT
    Ransomware Disney Family id30765 View details United States Finance / Legal / Insurance
    Ransomware Disney Family id30765 View details United States Finance / Legal / Insurance
    Ransomware Ecopetrol id30672 View details Colombia Energy
    Ransomware Ecopetrol id30672 View details Colombia Energy
    Ransomware Military Sealift Command id30646 View details United States Transportation / Travel / Logistics
    Ransomware Military Sealift Command id30646 View details United States Transportation / Travel / Logistics
    Ransomware Advantage Home Health Care id30647 View details United States Healthcare / Medicine
    Ransomware Advantage Home Health Care id30647 View details United States Healthcare / Medicine
    Ransomware Sunway Scientific id30648 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Sunway Scientific id30648 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Tangram Interiors id30614 View details United Kingdom Construction / Real Estate
    Ransomware Tangram Interiors id30614 View details United Kingdom Construction / Real Estate
    Ransomware Tangram Interiors id30614 View details United States Construction / Real Estate
    Ransomware BRAC id30615 View details Bangladesh NGOs / Associations
    Ransomware BRAC id30615 View details Bangladesh NGOs / Associations
    Ransomware Customs Watch id30616 View details United States Retail / E-commerce
    Ransomware Customs Watch id30616 View details United States Retail / E-commerce
    Ransomware Gallant id30617 View details Finland IT
    Ransomware Gallant id30617 View details Finland IT
    Ransomware Hanseata id30618 View details Germany Finance / Legal / Insurance
    Ransomware Hanseata id30618 View details Germany Finance / Legal / Insurance
    Ransomware Metro Mondego id30595 View details Portugal Transportation / Travel / Logistics
    Ransomware Metro Mondego id30595 View details Portugal Transportation / Travel / Logistics
    Ransomware Comet Enterprise Corp id30596 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Comet Enterprise Corp id30596 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Landesbibliothek Coburg id30597 View details Germany Education
    Ransomware Landesbibliothek Coburg id30597 View details Germany Education
    Ransomware ALUFE Femszerkezeti Kft id30598 View details Hungary Manufacturing / Engineering
    Ransomware ALUFE Femszerkezeti Kft id30598 View details Hungary Manufacturing / Engineering
    Ransomware Tooltec id30599 View details Sweden Manufacturing / Engineering
    Ransomware Tooltec id30599 View details Sweden Manufacturing / Engineering
    Ransomware Terra Vitis id30600 View details France Agriculture / Food
    Ransomware Terra Vitis id30600 View details France Agriculture / Food
    Ransomware Vignobles Toutigeac id30601 View details France Other
    Ransomware Vignobles Toutigeac id30601 View details France Other
    Ransomware Dink Co Ltd id30602 View details Japan IT