Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 787 published victims and 1 known leak locations in a single intelligence view.

Victims 787 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 138 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 787 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (787)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 101–200 of 787.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Dink Co Ltd id30602 View details Japan IT
    Ransomware Dink Co Ltd id30602 View details Japan IT
    Ransomware Lsn id30604 View details IT
    Ransomware Lsn id30604 View details IT
    Ransomware Lsn id30604 View details Poland IT
    Ransomware Giraudi Group id30605 View details Italy
    Ransomware Giraudi Group id30605 View details Italy
    Ransomware Mesto Celakovice id30606 View details Czechia
    Ransomware Mesto Celakovice id30606 View details Czechia
    Ransomware Kaneko id30607 View details Japan Manufacturing / Engineering
    Ransomware Kaneko id30607 View details Japan Manufacturing / Engineering
    Ransomware Byggelit Sverige id30608 View details Sweden
    Ransomware Byggelit Sverige id30608 View details Sweden
    Ransomware Terry P Moosmann CPA PC id30609 View details United States
    Ransomware Terry P Moosmann CPA PC id30609 View details United States
    Ransomware Royal Foods id30475 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Royal Foods id30475 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Ferretería Scopazzo id30476 View details Argentina Retail / E-commerce
    Ransomware Ferretería Scopazzo id30476 View details Argentina Retail / E-commerce
    Ransomware Fortray id30477 View details IT
    Ransomware Fortray id30477 View details IT
    Ransomware Martin Cava id30478 View details Spain Other
    Ransomware Martin Cava id30478 View details Spain Other
    Ransomware Aveiro Constructors Limited id30479 View details Portugal Construction / Real Estate
    Ransomware Aveiro Constructors Limited id30479 View details Portugal Construction / Real Estate
    Ransomware Triquesta id30480 View details Mexico IT
    Ransomware Triquesta id30480 View details Mexico IT
    Ransomware Vicenzi Group id30481 View details Italy Agriculture / Food
    Ransomware Vicenzi Group id30481 View details Italy Agriculture / Food
    Ransomware Energon id30482 View details Czechia Energy
    Ransomware Energon id30482 View details Czechia Energy
    Ransomware Open Options id30483 View details Ireland IT
    Ransomware Open Options id30483 View details Ireland IT
    Ransomware INTERNET AG id30484 View details Germany IT
    Ransomware INTERNET AG id30484 View details Germany IT
    Ransomware Crossroads Medical Management id30485 View details United States Healthcare / Medicine
    Ransomware Crossroads Medical Management id30485 View details United States Healthcare / Medicine
    Ransomware Pharma Wholesale id30486 View details Healthcare / Pharma
    Ransomware Pharma Wholesale id30486 View details Healthcare / Pharma
    Ransomware Pharma Wholesale id30486 View details United States Healthcare / Pharma
    Ransomware Welders Supply Equipment Rentals id30487 View details United States Construction / Real Estate
    Ransomware Welders Supply Equipment Rentals id30487 View details United States Construction / Real Estate
    Ransomware VASBE id30488 View details Russian Federation IT
    Ransomware VASBE id30488 View details Russian Federation IT
    Ransomware Gene Codes Forensics id30489 View details United States Healthcare / Medicine
    Ransomware Gene Codes Forensics id30489 View details United States Healthcare / Medicine
    Ransomware Lopes Law id30490 View details United States Finance / Legal / Insurance
    Ransomware Lopes Law id30490 View details United States Finance / Legal / Insurance
    Ransomware Carita id30491 View details France Retail / E-commerce
    Ransomware Carita id30491 View details France Retail / E-commerce
    Ransomware BDO Greece id30492 View details Greece Finance / Legal / Insurance
    Ransomware BDO Greece id30492 View details Greece Finance / Legal / Insurance
    Ransomware Dash Door Glass id30493 View details United States IT
    Ransomware Dash Door Glass id30493 View details United States IT
    Ransomware Shamrock Holdings Inc. id30327 View details United States IT
    Ransomware Shamrock Holdings Inc. id30327 View details United States IT
    Ransomware Medic Rescue id30328 View details United States NGOs / Associations
    Ransomware Medic Rescue id30328 View details United States NGOs / Associations
    Ransomware LogiQuip id30329 View details United Kingdom Manufacturing / Engineering
    Ransomware LogiQuip id30329 View details United Kingdom Manufacturing / Engineering
    Ransomware Virginia Historical Society id30330 View details United States NGOs / Associations
    Ransomware Virginia Historical Society id30330 View details United States NGOs / Associations
    Ransomware Quanterm Logistics Sdn Bhd id30331 View details Malaysia IT
    Ransomware Quanterm Logistics Sdn Bhd id30331 View details Malaysia IT
    Ransomware Spedidam id30332 View details France Services
    Ransomware Spedidam id30332 View details France Services
    Ransomware hiddeenn id30333 View details Other
    Ransomware hiddeenn id30333 View details Other
    Ransomware Arabia Falcon Insurance Company SAOG id30334 View details Oman Finance / Legal / Insurance
    Ransomware Arabia Falcon Insurance Company SAOG id30334 View details Oman Finance / Legal / Insurance
    Ransomware Ce Ratp Comite D entreprise Ratp id30335 View details France Other
    Ransomware Ce Ratp Comite D entreprise Ratp id30335 View details France Other
    Ransomware Keifert id30336 View details Germany Manufacturing / Engineering
    Ransomware Keifert id30336 View details Germany Manufacturing / Engineering
    Ransomware Kosmos id30337 View details Germany IT
    Ransomware Kosmos id30337 View details Germany IT
    Ransomware EBNY Development id30338 View details Egypt Retail / E-commerce
    Ransomware EBNY Development id30338 View details Egypt Retail / E-commerce
    Ransomware Tonnies Group id30339 View details Germany Agriculture / Food
    Ransomware Tonnies Group id30339 View details Germany Agriculture / Food
    Ransomware Automovil Supply S.A id30340 View details Paraguay Retail / E-commerce
    Ransomware Automovil Supply S.A id30340 View details Paraguay Retail / E-commerce
    Ransomware Excel Cell Electronic id30341 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Excel Cell Electronic id30341 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Mercado Libre id30342 View details Argentina Retail / E-commerce
    Ransomware Mercado Libre id30342 View details Argentina Retail / E-commerce
    Ransomware CSIR Structural Engineering Research Centre id30343 View details India Research
    Ransomware CSIR Structural Engineering Research Centre id30343 View details India Research
    Ransomware Jump Solutions Inc id30344 View details Philippines IT
    Ransomware Jump Solutions Inc id30344 View details Philippines IT
    Ransomware MBT Energy id30345 View details Germany Energy
    Ransomware MBT Energy id30345 View details Germany Energy
    Ransomware Pro-Tech Technology id30347 View details Singapore Energy
    Ransomware Pro-Tech Technology id30347 View details Singapore Energy
    Ransomware Pro-Tech Technology id30347 View details Hong Kong Energy
    Ransomware Technical Solutions Group id30348 View details United States IT
    Ransomware Technical Solutions Group id30348 View details United States IT
    Ransomware Keywest Projects id30178 View details Canada Construction / Real Estate
    Ransomware Keywest Projects id30178 View details Canada Construction / Real Estate
    Ransomware International Freight Services id30179 View details United States IT