Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 1098 published victims and 2 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Thegentlemen is tracked by Breach House as a ransomware group with 1098 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Leak Status Distribution
No leak-status data available yet.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 2 | Onion service | Down checked 22m ago | i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion |
| Leak location 1 | Onion service | Down checked 23m ago | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
Top Activity Sectors (20)
- IT 118
- Manufacturing / Engineering 104
- Communication / Marketing 88
- Healthcare / Pharma 68
- Retail / E-commerce 57
- Finance / Legal / Insurance 50
- Construction / Real Estate 48
- Services 44
- Transportation / Travel / Logistics 30
- Not identified 27
- Agriculture / Food 23
- Education 22
- Public Sector 20
- Energy 18
- NGOs / Associations 12
- Hospitality / Food & Beverage / Tourism 12
- Telecommunications 6
- Media / Entertainment 1
- Law Enforcement / Public Sector 1
- Research 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Thegentlemen, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: thegentlemen executes PowerShell scripts to run payload logic, disable defenses, and propagate across systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: thegentlemen modifies registry run keys and startup locations to maintain persistence after reboots.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: thegentlemen disables or modifies security tools such as EDR and AV processes to hinder incident response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: thegentlemen deletes Volume Shadow Copies and backup artifacts via system commands to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1003.001 LSASS Memory Credential Access
What they do: thegentlemen accesses LSASS memory to steal credentials for lateral movement and privilege escalation.
What that means: Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
-
T1135 Network Share Discovery Discovery
What they do: thegentlemen uses network share discovery to locate victim file shares and map accessible storage paths for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: thegentlemen uses SMB/Windows Admin Shares for lateral movement between networked hosts in manufacturing and IT environments.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: thegentlemen encrypts victim files and data stores using ransomware payloads to maximize impact and extortion pressure.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: thegentlemen calls system recovery inhibitors to block restore processes and harden ransomware impact.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
-
T1491.001 Internal Defacement Impact
What they do: thegentlemen performs internal defacement by replacing victim files with ransom notes and altered content.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (64)
▼Software Thegentlemen has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
DumpBrowserSecrets
KslKatz
Mimikatz
Defense evasion
EDRStartupHinder
KslDump
PowerRun
RedSun
ThrottleStop driver (BYOVD)
Discovery
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
MANSPIDER
Nmap
PrivHound
RelayKing-Depth
Shodan
SoftPerfect NetScan
TaskHound
Discovery & enumeration
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
Nmap
MANSPIDER
PrivHound
RelayKing-Depth
Shodan
TaskHound
Exfiltration
RClone
WinSCP
LOLBAS (living-off-the-land binaries)
PsExec
Networking & tunnelling
Amnezia VPN
Chisel
Cloudflared
OpenVPN
Proxychains
PuTTY
Wireguard VPN
OpenSSH
OffSec
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
Offensive security tooling
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
RMM Tools
AnyDesk
FreeRDP
MeshAgent
Remote monitoring & management
AnyDesk
FreeRDP
MeshAgent
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-GENTLEMEN_3.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 13343E50C1B3466F0EA35B5B3E55A044CB7132FD28A8665EFEA0E5848E276D548C21B79F15C2 Download Tox messenger: https://tox.chat/download.html Contact us (add via SimpleX): https://smp14.simplex.im/a#4mlOiePV8NBXOv2QrZ9CaPeRPm1mBUgxn4SdpFnm978 Download SimpleX https://simplex.chat/downloads/ СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/TheGentlemen26 Clearnet blog link: https://thegentlemen.cc/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats. We have stolen more than 100 GB of your corporate information from your servers, including critically important data. Your company is facing a massive information security breach. A total data leak has occurred. This greatly increases the risk of colossal financial and reputational losses.
README-GENTLEMEN_2.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 98C132E2B20B531BE6604397D97040C1E9EB42FCE12EDF119BCE8B4031CA5C70DAF5E65FA3C3 Download Tox messenger: https://tox.chat/download.html Contact us (add via Session ID): 05809b2da1d5b1a302f48b5767fd1843d54f3c516f9ab0eb26b544ffa73340292e Download Session https://getsession.org СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats.
README-GENTLEMEN.txt
[snip] = YOUR ID Gentlemen, your network is under our full control. All your files are now encrypted and inaccessible. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E Download Tox messenger: https://tox.chat/download.html COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1098)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 201–300 of 1098.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Axson Teknik id31441 View details | Sweden | — | — | — | |
|
axson.se zoominfo.com/c/axson-teknik-ab/456419010 Axson Teknik AB is a Swedish industrial supplier based in Askim, specializing in high-quality manual and robotic welding and cutting equipment. Founded in 1984, the company provides comprehensive technical services, maintenance, and specialized training for various industrial applications. They represent leading global brands such as Fronius, Thermal Dynamics, and Orbitalum, serving as a reliable partner for the manufacturing sector |
||||||
| Ransomware | Ponti id31442 View details | Poland | — | — | — | |
|
ponti.pl Ponti is a specialized automotive company based in Gdańsk, Poland, focused on the direct import, sales, and professional servicing of American vehicles. Operating as a leading expert in the US car market, the company handles everything from modern everyday models to the restoration of classic muscle cars and vintage vehicles. They provide a comprehensive range of services, including sourcing, repairing post-accident imports, and dedicated mechanical maintenance for automotive enthusiasts |
||||||
| Ransomware | Godollo id31443 View details | Hungary | — | — | — | |
|
godolloi.hu zoominfo.com/c/gödöll/1295448671 Gödöllő Ingatlanközpont is a leading real estate agency based in Gödöllő, Hungary, specializing in property sales, rentals, and construction in Eastern Pest County. The company offers a vast portfolio of residential and commercial properties, including apartments, family houses, land plots, and industrial spaces across Gödöllő and its surrounding towns. Established as a trusted local expert, the agency provides comprehensive real estate brokerage services to help clients navigate the regional property market |
||||||
| Ransomware | Hoang Chiropractic Center id31444 View details | United States | — | — | — | |
|
hoangchiro.com zoominfo.com/c/hoang-chiropractic-center/357138190 Hoang Chiropractic Center is a specialized healthcare clinic located in Metairie, Louisiana, led by Dr. Kim Hoang. The practice focuses on non-surgical pain relief and holistic wellness, offering services like AccuSpina spinal decompression, chiropractic adjustments, and custom orthotics. They are dedicated to helping patients relieve back pain and restore the body's natural ability to heal itself through personalized care |
||||||
| Ransomware | aZaaS id31445 View details | United States | — | — | — | |
|
azaas.com zoominfo.com/c/azaas-pte-ltd/353475433 aZaaS is a dynamic, Singapore-based IT services company specializing in IT as a Service (ITaaS) and hybrid cloud architecture solutions. They build and operate mission-grade, secure digital services for government and enterprise clients, strictly aligned with local compliance standards like GCC and IM8. The company provides comprehensive solutions including Business Process Management (BPM), Data as a Service (DaaS), and enterprise mobility to help organizations optimize their IT infrastructure |
||||||
| Ransomware | aZaaS id31445 View details | Singapore | — | — | — | |
|
azaas.com zoominfo.com/c/azaas-pte-ltd/353475433 aZaaS is a dynamic, Singapore-based IT services company specializing in IT as a Service (ITaaS) and hybrid cloud architecture solutions. They build and operate mission-grade, secure digital services for government and enterprise clients, strictly aligned with local compliance standards like GCC and IM8. The company provides comprehensive solutions including Business Process Management (BPM), Data as a Service (DaaS), and enterprise mobility to help organizations optimize their IT infrastructure |
||||||
| Ransomware | HIWIN id31446 View details | Italy | — | — | — | |
|
hiwin.it zoominfo.com/c/hiwin-srl/446225948 HIWIN Italia is the Italian subsidiary of the global Taiwanese corporation HIWIN Technologies, a world leader in motion control and system technology. Founded in 2013 and based in the Milan area, the company specializes in manufacturing high-precision components such as ball screws, linear guideways, industrial robots, bearings, and drive systems. They serve a wide range of high-tech industries, including semiconductor, automation, and medical equipment sectors across Southern Europe. |
||||||
| Ransomware | National Furniture Outlet id31447 View details | United States | — | — | — | |
|
nationalfurnitureoutlet.com National Furniture Outlet is a family-owned retail store in Westwego, Louisiana, serving the Greater New Orleans area for over three decades. They specialize in selling affordable living room, bedroom, and dining room furniture, as well as mattresses and appliances at highly competitive, discounted prices. The business is well-known locally for its frequent overstock sales and flexible financing options to support the community |
||||||
| Ransomware | TESI id31448 View details | Italy | — | — | — | |
|
tesiimpianti.it TESI S.r.l. is an Italian industrial company founded in 1997 as a spin-off from the Falck Group, specializing in machinery for coil and sheet metal processing. The company handles the buying, selling, installation, and maintenance of complete production lines for the metallurgical sector. A core part of their business is the deep refurbishment and technological upgrading of used industrial equipment with modern electrical and hydraulic systems. |
||||||
| Ransomware | Intranet Gov Brasil id31449 View details | Brazil | — | — | — | |
|
English: intranet.gov.br "Intranet Gov Brasil" refers to the secure internal corporate network and digital portal infrastructure used by the Brazilian Federal Government (gov.br) for its civil servants and ministries. It provides restricted access to internal administrative systems, official communications, and digital public services that are hidden from the general public. The underlying IT infrastructure and cybersecurity of these portals are primarily developed and maintained by state-owned technology companies like Serpro and Dataprev. |
||||||
| Ransomware | Feraboli Zootech id31450 View details | Italy | — | — | — | |
|
feraboli.it Feraboli Zootech is a historic Italian company operating in the livestock sector since 1880, with a heritage spanning over six generations. Based in Sospiro (Cremona), it specializes in designing and building advanced cattle barns, metal structures, and tailor-made equipment for dairy and fattening farms. The company combines traditional craftsmanship with modern automation and animal welfare solutions for professional breeders. |
||||||
| Ransomware | Nobema id31451 View details | Germany | Media / Entertainment | — | — | |
|
nobema.com zoominfo.com/c/nobema-srl/371446900 Nobema S.r.l. is an Italian family-run manufacturing company based near Turin, specializing in plastic molding and integrated industrial services since 1986. They provide end-to-end solutions ranging from custom mold design and pre-series sampling to advanced gas injection technology and mass production. The company serves diverse sectors with high-quality plastic components, uniquely combining industrial parts with niche consumer products like drumsticks |
||||||
| Ransomware | Vemec id31452 View details | Argentina | — | — | — | |
|
vemecsrl.com zoominfo.com/c/vemec-srl/397907621 Vemec S.r.l. is a leading Italian manufacturing company founded in 1983, specializing in the design and production of mechanical components and assemblies for heavy machinery. Operating across multiple production facilities covering over 23,000 square meters in Northern Italy, the firm provides advanced metal machining, laser cutting, and structural fabrication services. With more than 40 years of experience, Vemec delivers high-precision engineering solutions to diverse industrial sectors, including mechanotextiles and heavy equipment manufacturing |
||||||
| Ransomware | LensAss Architecten id31453 View details | Belgium | — | — | — | |
|
lensass.be LensAss Architecten is a Belgian architecture studio based in Hasselt, founded in 1995 by Bart Lens. The firm centers its work on the relationship between space, light, and context, specializing in both renovation and new construction. Its portfolio spans private homes, galleries, and adaptive reuse of heritage buildings across Belgium. |
||||||
| Ransomware | Phase Technologies id31454 View details | United States | — | — | — | |
|
phasetechnologies.com zoominfo.com/c/phase-technologies-llc/92275872 Phase Technologies is a leading American manufacturer of advanced power electronics, specializing in digital phase converters, variable frequency drives (VFDs), and motor protection. Founded in 1999 and headquartered in Rapid City, South Dakota, the company engineers and assembles its products entirely in the USA. Their innovative solutions generate high-quality three-phase power from single-phase sources, maximizing energy efficiency and system reliability for industrial and agricultural applications |
||||||
| Ransomware | Holborn European Marketing id31455 View details | Cyprus | — | — | — | |
|
holborn.com.cy zoominfo.com/c/holborn-european-marketing-company-ltd/462273998 Holborn European Marketing Company Limited is a Cyprus-based energy trading firm established in 1987, operating from its headquarters in Larnaca. The company specializes in purchasing crude oil and feedstocks, selling refined petroleum products, and active oil trading. It serves as a major energy supplier that fulfills local market needs in Cyprus while also maintaining a significant operational presence as a key oil products supplier in Northern Germany. |
||||||
| Ransomware | ZS Salovnova id31456 View details | Czechia | — | — | — | |
|
zssalounova.cz ZŠ Šalounova is a primary school located in the Vítkovice district of Ostrava, Czech Republic, operating across two buildings on Šalounova and Halasova streets. The institution provides comprehensive standard education alongside specialized programs, a wide range of extracurricular clubs, and a full school counseling facility. It actively supports student success through dedicated staff, including school psychologists, special educators, and career counselors, as well as various educational and sports projects. |
||||||
| Ransomware | Halliday Watkins Mann id31457 View details | United States | — | — | — | |
|
hwmlawfirm.com zoominfo.com/c/halliday--watkins--mann-pc/42929145 Halliday, Watkins & Mann, P.C. (HWM) is a Salt Lake City-based law firm founded in 1935, now operating as a fourth-generation family practice. The firm exclusively serves the mortgage banking industry, specializing in creditor remedies such as foreclosures, bankruptcies, replevins, evictions, and REO closings. With a team of 51–200 employees, HWM provides full-service legal support and title curative work to financial institutions across multiple states |
||||||
| Ransomware | YY Business Solutions id31458 View details | IT | — | |||
|
Y&Y Business Solutions (YYB Business Solutions Inc.) is a Bronx-based company located at 169 Lincoln Avenue, Suite 208, Bronx, NY 10454, reachable at (347) 270-1283. Founded and led by Valerie and Yerlin, the firm specializes in income taxes, immigration services, business license & registration, DMV & TLC services, and document translation. The company primarily serves Spanish-speaking immigrants and small business owners, helping them navigate U.S. immigration processes and tax requirements. They are most active on Instagram (@yybsolutions) and Facebook, where they share updates and client guidance. |
||||||
| Ransomware | YY Business Solutions id31489 View details | United States | IT | — | ||
|
yybusinesssolutions.com is an IT company based in the United States, offering various IT solutions. The company operates within the IT sector, providing services to its clients. yybusinesssolutions.com was listed as a ransomware victim associated with thegentlemen. |
||||||
| Ransomware | YY Business Solutions id31489 View details | United States | IT | — | ||
|
Y&Y Business Solutions (YYB Business Solutions Inc.) is a Bronx-based company located at 169 Lincoln Avenue, Suite 208, Bronx, NY 10454, reachable at (347) 270-1283. Founded and led by Valerie and Yerlin, the firm specializes in income taxes, immigration services, business license & registration, DMV & TLC services, and document translation. The company primarily serves Spanish-speaking immigrants and small business owners, helping them navigate U.S. immigration processes and tax requirements. They are most active on Instagram (@yybsolutions) and Facebook, where they share updates and client guidance. |
||||||
| Ransomware | TopMark Funding id31236 View details | United States | Finance / Legal / Insurance | — | — | |
|
Topmarkfunding.com is a financial services company based in the US, operating in the finance, legal, and insurance sector. The company provides funding solutions to its clients. Topmarkfunding.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | TopMark Funding id31236 View details | United States | Finance / Legal / Insurance | — | — | |
|
topmarkfunding.com zoominfo.com/c/topmark-funding-llc/368696312 TopMark Funding is a nationwide commercial financing company specializing in fast funding solutions for semi-trucks, trailers, and heavy construction equipment. Headquartered in California, they help trucking and construction businesses acquire machinery ranging from $25,000 to $500,000. The company is recognized for providing quick approvals, flexible terms, and risk-free quotes without impacting the client's credit score |
||||||
| Ransomware | Control Concepts Technology id31237 View details | United States | Manufacturing / Engineering | — | — | |
|
Control Concepts Texas operates in the manufacturing and engineering sector, providing services in the United States. The company's specific offerings are not publicly detailed, but it is known to be involved in manufacturing and engineering activities. Control Concepts Texas was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Control Concepts Technology id31237 View details | United States | Manufacturing / Engineering | — | — | |
|
controlconceptstexas.com zoominfo.com/c/control-concepts--technology/356919279 Control Concepts is a Texas-based industrial automation and electronics repair company established in 1984. They specialize in servicing, repairing, and installing AC/DC motor drives, PLCs, and industrial motor controls. Operating as a certified UL508a Panel Shop, the company also provides 24-hour emergency service, system upgrades, and custom automation solutions |
||||||
| Ransomware | Philippine Savings Bank id31151 View details | Philippines | Finance / Legal / Insurance | — | — | |
|
PSBank is a Philippine-based financial institution that provides a range of banking and financial services to individuals and businesses in the Philippines. As part of the finance sector, it offers various products and services, including deposit accounts, loans, and investment products. PSBank operates in the finance, legal, and insurance sector, serving the Philippine market. It was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Philippine Savings Bank id31151 View details | Philippines | Finance / Legal / Insurance | — | — | |
|
psbank.com.ph zoominfo.com/c/philippine-savings-bank/83461899 SBank is widely recognized across the Philippines for its highly accessible Auto and Home Loan programs that make vehicle and property ownership easier for everyday consumers. One of its most unique financial products is the Flexi Personal Loan, a revolving credit line that allows clients to withdraw, repay, and reuse funds flexibly |
||||||
| Ransomware | Las Cenizas id31084 View details | Chile | Other | — | — | |
|
Cenizas.cl is a Chile-based entity operating in the other sector. The company likely provides various services to its clients in Chile. Cenizas.cl was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Las Cenizas id31084 View details | Chile | Other | — | — | |
|
cenizas.cl zoominfo.com/c/cenizas/430439098 Grupo Minero Las Cenizas, a prominent medium-scale mining company in Chile with over four decades of industry experience. The company specializes in the production of copper fines and cathodes. Its main mining operations and facilities are strategically located in Cabildo, Taltal, and Franke, Chile |
||||||
| Ransomware | Kenaitze Indian Tribe id31085 View details | United States | NGOs / Associations | — | — | |
|
Kenaitze.org is a non-profit organization based in the United States, operating in the NGOs and Associations sector. The organization provides various services and support to its community. Kenaitze.org was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Kenaitze Indian Tribe id31085 View details | United States | NGOs / Associations | — | — | |
|
kenaitze.org The Kenaitze Indian Tribe is a federally recognized sovereign nation of the Kahtnuht'ana Dena'ina people located on Alaska's Kenai Peninsula. Its core mission is "to assure Kahtnuht'ana Dena'ina thrive forever" through holistic, culturally grounded support. The Tribe operates the Dena'ina Wellness Center, providing comprehensive medical, dental, and behavioral health services, alongside education, elder care, and tribal fisheries to preserve their heritage and promote community well-being |
||||||
| Ransomware | Additive Manufacturing id31086 View details | United States | Manufacturing / Engineering | — | — | |
|
Additivemanufacturingllc.com is a company operating in the manufacturing and engineering sector in the United States. The company likely provides services related to additive manufacturing, a process of creating products by adding materials layer by layer. Additivemanufacturingllc.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Additive Manufacturing id31086 View details | United States | Manufacturing / Engineering | — | — | |
|
additivemanufacturingllc.com zoominfo.com/c/additive-manufacturing-llc/369228736 Additive Manufacturing LLC is a U.S.-based company headquartered in Las Vegas, Nevada, specializing in 3D printing, rapid prototyping, and short- to mid-run production of metal and plastic parts. Backed by over a century of combined industry experience, the company bridges digital fabrication and traditional manufacturing, offering services like CNC machining, production tooling, and assembly. By leveraging a global network of partners and on-demand digital factories, they ensure scalable, high-quality, and cost-effective solutions with reliable lead times |
||||||
| Ransomware | Salem Saleh Babgi id31087 View details | Saudi Arabia | Manufacturing / Engineering | — | — | |
|
Babgi.com.sa is a Saudi Arabian company operating in the manufacturing and engineering sector. The company is based in Saudi Arabia and likely provides various services and products related to manufacturing and engineering. Babgi.com.sa was listed as a ransomware victim associated with thegentlemen. |
||||||
| Ransomware | Salem Saleh Babgi id31087 View details | Saudi Arabia | Manufacturing / Engineering | — | — | |
|
babgi.com.sa zoominfo.com/c/salem-saleh-babgi-co-ltd/372739058 Babgi Group, founded in 1978 by Sheikh Salem Saleh Babgi, is a major Saudi Arabian conglomerate with over 1,900 employees and revenues exceeding $7.4 billion. The group operates primarily in the automotive sector (as an exclusive dealer for brands like Toyota, Lexus, and MG), trading, and contracting. Guided by a vision of sustainable economic growth, it focuses on delivering high-quality standards, advanced management practices, and community-driven services across the Kingdom |
||||||
| Ransomware | Salama Medicals Distributors Private id31088 View details | Tanzania, United Republic of | Healthcare / Pharma | — | — | |
|
Salamapharma.co.tz is a pharmaceutical company based in Tanzania, operating in the healthcare sector. The company likely provides medical supplies and pharmaceutical products to the local market. Salamapharma.co.tz was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Salama Medicals Distributors Private id31088 View details | Tanzania, United Republic of | Healthcare / Pharma | — | — | |
|
salamapharma.co.tz zoominfo.com/c/salama-medicals-distributors-private-ltd/356160819 Salama Pharmaceuticals Limited is Tanzania’s leading importer and distributor of pharmaceuticals, medical devices, and surgical equipment. Headquartered in Dar es Salaam, the company operates a large multi-warehouse distribution network to serve healthcare facilities across the country. Dedicated to enhancing healthcare outcomes, Salama Pharma focuses on supplying quality medical products and supporting the modernization of healthcare operations in the East African region |
||||||
| Ransomware | Krafman id31089 View details | Sweden | Other | — | — | |
|
Krafman.se is a Swedish entity operating in the other sector, providing various offerings to its customers. Located in Sweden, the company serves its clients with a range of services. Krafman.se was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Krafman id31089 View details | Sweden | Other | — | — | |
|
krafman.se Krafman (operated by Krafguard AB) is a Swedish credit reporting and debt collection service provider licensed and supervised by the Swedish Authority for Privacy Protection (IMY). The platform offers fast, on-demand credit checks for both businesses and private individuals without registering the number of inquiries made. It also provides free basic company searches, active credit monitoring with automatic updates, and transparent pricing with no hidden subscription fees |
||||||
| Ransomware | Kosh Innovations id31090 View details | IT | — | — | ||
|
Koshinnovations.com is an IT sector company, presumably operating in the information technology industry, although specific details about its location and offerings are not readily available. As an entity in the IT sector, it may provide various services such as software development, consulting, or technology solutions. Koshinnovations.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Kosh Innovations id31090 View details | IT | — | — | ||
|
koshinnovations.com zoominfo.com/c/kosh-innovations/369426368 Kosh Innovations, established in 2008 in Pondicherry, India, is a leading manufacturing solutions provider specializing in precision engineering, plastic moulding, sheet metal components, and electronic manufacturing services (EMS). Certified with IATF 16949 and multiple ISO standards, the company serves diverse sectors including automotive, consumer durables, green-tech, and healthcare. With a strategic presence across six locations in India, Kosh Innovations is committed to delivering customized, sustainable, and high-quality products through a customer-centric and innovative approach |
||||||
| Ransomware | Saturn Industries id31091 View details | United States | Manufacturing / Engineering | — | — | |
|
Saturnind.com is a company operating in the manufacturing and engineering sector in the United States, providing various products and services to its clients. The company's offerings cater to the needs of its customers in the respective industry. Saturnind.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Saturn Industries id31091 View details | United States | Manufacturing / Engineering | — | — | |
|
saturnind.com zoominfo.com/c/saturn-industries-ltd/348367401 Saturn Industries, based in Winnipeg, Manitoba, is a specialized manufacturer of custom-engineered trailers and overhead lifting products. Operating as a division of BROCK LEMKO Inc., the company serves demanding sectors such as construction, marine, powerline, mining, and aerospace. Since 1996, they have built a strong reputation for designing and fabricating tailored solutions, including dump trailers, lifting beams, and personnel baskets. Their focus remains on durability, safety, and delivering highly customized industrial equipment to meet specific client applications |
||||||
| Ransomware | Acosta Sons id31092 View details | United States | Construction / Real Estate | — | — | |
|
Acosta and Sons is a construction and real estate company based in the United States, providing services within the sector. The company operates in the construction and real estate industry, offering various services to clients. Acosta and Sons was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Acosta Sons id31092 View details | United States | Construction / Real Estate | — | — | |
|
acostaandsons.com zoominfo.com/c/acosta--sons-inc/398811105 Acosta and Sons is a family-owned appliance sales and repair company based in The Bronx, New York, with additional locations serving the broader New York area. They specialize in providing a wide range of home appliances at discounted prices, catering to both individual customers and property management or landlord accounts. The company is known for its reliable customer service, offering comprehensive solutions from appliance sales to professional repair and maintenance. |
||||||
| Ransomware | CFS id31093 View details | United States | Manufacturing / Engineering | — | — | |
|
cfsinc.com operates in the manufacturing and engineering sector, providing services in the United States. As a company in this sector, cfsinc.com likely offers a range of products and services related to manufacturing and engineering. cfsinc.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | CFS id31093 View details | United States | Manufacturing / Engineering | — | — | |
|
cfsinc.com zoominfo.com/c/cfs-inc/12944410 CFS Inc. is a Massachusetts-based marketing support services company with over 30 years of experience in print management, direct mail, kitting, promotional items, and fulfillment. Acting as a single-source solution, they handle projects from initial design to final execution, helping businesses streamline their marketing and logistical operations. The company is known for its flexible, customer-centric approach and a strong commitment to delivering high-quality, reliable results for clients of all sizes |
||||||
| Ransomware | OHK Energy id31094 View details | Singapore | Energy | — | — | |
|
Ohkenergy.com is an energy company based in Singapore, operating in the energy sector. The company likely provides energy-related services and offerings to its customers in the region. Ohkenergy.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | OHK Energy id31094 View details | Singapore | Energy | — | — | |
|
ohkenergy.com rocketreach.co/ohk-energy-profile_b6d2700bc7449e3f OHK Energy is Ireland’s largest and most trusted renewable energy provider and retrofit specialist, registered with the Sustainable Energy Authority of Ireland (SEAI). The company specializes in designing and installing solar PV, heat pumps, battery storage, and EV chargers for homeowners, businesses, farms, and communities. With a service-driven and future-focused approach, OHK Energy is dedicated to building a cleaner, more sustainable island by delivering tailored, high-quality energy solutions |
||||||
| Ransomware | OHK Energy id31094 View details | Ireland | Energy | — | — | |
|
ohkenergy.com rocketreach.co/ohk-energy-profile_b6d2700bc7449e3f OHK Energy is Ireland’s largest and most trusted renewable energy provider and retrofit specialist, registered with the Sustainable Energy Authority of Ireland (SEAI). The company specializes in designing and installing solar PV, heat pumps, battery storage, and EV chargers for homeowners, businesses, farms, and communities. With a service-driven and future-focused approach, OHK Energy is dedicated to building a cleaner, more sustainable island by delivering tailored, high-quality energy solutions |
||||||
| Ransomware | Hutch Paving id31095 View details | United States | Construction / Real Estate | — | — | |
|
Hutchpaving.com operates in the construction and real estate sector in the United States, providing paving services. As a company in this sector, it is involved in various construction and infrastructure projects. Hutchpaving.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Hutch Paving id31095 View details | United States | Construction / Real Estate | — | — | |
|
hutchpaving.com zoominfo.com/c/hutch-paving-inc/38258180 Hutch Paving is a highly respected asphalt and concrete paving contractor based in Southeast Michigan, serving the region since 1993. The company specializes in comprehensive pavement solutions, including resurfacing, maintenance, sealcoating, and new construction for commercial, municipal, industrial, and residential clients. Known for its safety-first approach, modern equipment, and attention to detail, Hutch Paving is committed to delivering durable, high-quality infrastructure with exceptional customer service |
||||||
| Ransomware | CRB group id31096 View details | Brazil | Manufacturing / Engineering | — | — | |
|
CRB Group is a Brazilian company operating in the manufacturing and engineering sector, providing various offerings to its clients. The company is based in Brazil and serves the local market with its products and services. CRB Group was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | CRB group id31096 View details | Brazil | Manufacturing / Engineering | — | — | |
|
crbgroup.com zoominfo.com/c/crb-group-gmbh/23317692 CRB is a leading global provider of sustainable engineering, architecture, construction, and consulting solutions, primarily serving the life sciences and food & beverage industries. Headquartered in Kansas City, Missouri, the company specializes in designing and building advanced facilities, such as cell and gene therapy laboratories and high-quality food manufacturing plants. With a strong international presence, CRB is dedicated to delivering innovative, safe, and efficient infrastructure that improves patient outcomes and advances scientific breakthroughs worldwide |
||||||
| Ransomware | Partition Specialties id31097 View details | United States | IT | — | — | |
|
psi3g.com is an IT company based in the United States, providing various services within the IT sector. The company operates in the US, offering solutions to its clients. psi3g.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Partition Specialties id31097 View details | United States | IT | — | — | |
|
psi3g.com zoominfo.com/c/partition-specialties-inc/90587733 Partition Specialties, Inc. (PSI), founded in 1958, is a leading commercial interior contractor based in California, serving clients across California and Northern Nevada. The company specializes in tailored architectural space management solutions, including high-quality movable partitions, demountable wall systems, and acoustic dividers. With decades of expertise, PSI helps corporate, hospitality, and industrial clients optimize their interior layouts with flexible, functional, and aesthetically pleasing design products |
||||||
| Ransomware | Preferred id31098 View details | United States | Retail / E-commerce | — | — | |
|
Preferredtool.com operates in the retail and e-commerce sector, providing various tools and products to customers in the United States. As an online retailer, the company offers a range of products and services to its customers. Preferredtool.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Preferred id31098 View details | United States | Retail / E-commerce | — | — | |
|
preferredtool.com Preferred Tool & Die is a precision manufacturing company based in Shelton, Connecticut, specializing in custom metal and plastic injection molds as well as complex stamped components. The company serves demanding sectors, including the medical, electrical, consumer products, and automotive industries. Holding ISO and FDA registrations, they are committed to delivering high-quality, reliable, and innovative manufacturing solutions tailored to exact client specifications |
||||||
| Ransomware | Premier Fiduciary id31099 View details | United Kingdom | Finance / Legal / Insurance | — | — | |
|
Premier Fiduciary is a company operating in the finance, legal, and insurance sector in Great Britain. The firm provides fiduciary services, which typically involve managing assets and making financial decisions on behalf of clients. Premier Fiduciary was listed as a ransomware victim associated with thegentlemen. |
||||||
| Ransomware | Premier Fiduciary id31099 View details | United Kingdom | Finance / Legal / Insurance | — | — | |
|
premierfiduciary.com zoominfo.com/c/premier-fiduciary/346765473 Premier Fiduciary is a global corporate and fiduciary services provider specializing in tailored solutions for private wealth clients, family offices, and investment managers. The company offers comprehensive services, including fund administration, trustee services, corporate setup, and regulatory compliance, with a strong presence in key financial hubs like Singapore and Hong Kong. Their mission is to build long-term relationships based on trust, delivering high-quality, holistic financial and administrative support to protect and grow client legacies |
||||||
| Ransomware | Bater id31100 View details | Poland | Retail / E-commerce | — | — | |
|
Bater.pl is a retail and e-commerce company based in Poland, offering various products and services to its customers. As an e-commerce platform, it provides online shopping experiences for users in Poland. Bater.pl was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Bater id31100 View details | Poland | Retail / E-commerce | — | — | |
|
bater.pl zoominfo.com/c/bater-ltd/429692403 Bater is a leading Polish manufacturer of traction and stationary batteries, founded in 1990 with production facilities in Warsaw and Gliwice. The company specializes in producing high-quality battery systems for electric forklifts, reserve power, and renewable energy applications, along with recombination plugs and protective battery racks. Holding ISO 9001 and ISO 14001 certifications, Bater also provides comprehensive nationwide services, including battery assembly, maintenance, room renovation, and recycling |
||||||
| Ransomware | Precision Concrete Pumping id31101 View details | United States | Construction / Real Estate | — | — | |
|
Precisionconcretepump.com is a US-based company operating in the construction and real estate sector, likely providing concrete pumping services. The company's offerings may include equipment and labor for construction projects. Precisionconcretepump.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Precision Concrete Pumping id31101 View details | United States | Construction / Real Estate | — | — | |
|
precisionconcretepump.com zoominfo.com/c/precision-concrete-pumping-inc/356699459 Precision Concrete Pumping, Inc. is an MBE-certified concrete pumping company established in 1988, with branches across New York and New Jersey. The company specializes in providing high-quality concrete pumping services, including boom pumps, line pumps, and telebelts, utilizing a modern fleet of Putzmeister and Schwing equipment. With over 25 years of experience, they serve commercial, industrial, and municipal projects throughout the Northeast, ensuring reliable performance and exceptional customer service |
||||||
| Ransomware | Clear Vision Signs id31102 View details | United Kingdom | Manufacturing / Engineering | — | — | |
|
Clear Vision Signs is a company based in the United Kingdom, operating in the manufacturing and engineering sector. The company likely provides signage solutions, given its name. Clear Vision Signs is listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Clear Vision Signs id31102 View details | United Kingdom | Manufacturing / Engineering | — | — | |
|
clearvisionsigns.net zoominfo.com/c/clear-vision-signs/365480092 Clear Vision Signs is a full-service architectural signage and graphics company based in Dade City, Florida, serving clients nationwide. They specialize in turnkey solutions, including wayfinding systems, ADA-compliant signage, environmental graphics, and comprehensive project management. By acting as a single trusted partner for developers and property managers, they ensure efficient, safe, and visually impactful signage programs from initial concept to final installation |
||||||
| Ransomware | Orsima id31103 View details | IT | — | — | ||
|
Orsima.com operates within the IT sector, providing various services. The company's specific location and offerings are not publicly disclosed. Orsima.com was listed as a ransomware victim associated with thegentlemen. |
||||||
| Ransomware | Orsima id31103 View details | IT | — | — | ||
|
orsima.com zoominfo.com/c/orsima/347930414 ORSIMA is a leading Algerian IT services company with over 30 years of expertise in digital transformation, data center modernization, and cybersecurity. As a strategic partner of major technology providers like Dell Technologies and Microsoft, it offers comprehensive solutions including managed services, software licensing optimization, and professional training. The company is dedicated to helping enterprises and institutions in Algeria optimize their IT infrastructure and ensure high availability and business continuity |
||||||
| Ransomware | The Municipal Chamber of Serra id31104 View details | Brazil | Public Sector | — | — | |
|
Camaraserra.es.gov.br is a government website in the state of Espirito Santo, Brazil, serving the public sector. It provides various online services and information to citizens. Camaraserra.es.gov.br was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | The Municipal Chamber of Serra id31104 View details | Brazil | Public Sector | — | — | |
|
camaraserra.es.gov.br The Municipal Chamber of Serra (Câmara Municipal da Serra) is the legislative body of the city of Serra, located in the state of Espírito Santo, Brazil. As the largest legislative house in the state, it is composed of elected councilors responsible for creating local laws, overseeing the executive branch, and representing the citizens' interests. The institution is committed to transparency, active public participation, and the sustainable development of the municipality through its plenary sessions and specialized committees. |
||||||
| Ransomware | Efrata College of Education id31105 View details | Israel | Healthcare / Pharma | — | — | |
|
Emef ac il is an entity operating in the healthcare sector in Israel, providing medical services and offerings. As a healthcare organization, emef ac il is committed to delivering quality care to its patients. Emef ac il was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Efrata College of Education id31105 View details | Israel | Healthcare / Pharma | — | — | |
|
emef.ac.il zoominfo.com/c/efrata-college-of-education/1337375131 Emuna-Efrata Academic College is a higher education institution located formed by the merger of Efrata College of Education and Emuna College of Arts. The college offers unique bachelor's and master's degree programs focusing on education (early childhood, elementary, special, and secondary) and the arts (visual communication, theater, and fine arts). With over 40 years of experience, it is dedicated to training leading female educators and creators, providing a supportive, values-driven academic environment. |
||||||
| Ransomware | Amicell id31106 View details | Israel | IT | — | — | |
|
Amicell.co.il is an Israeli IT company providing various services. The company operates in the information technology sector in Israel. Amicell.co.il was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Amicell id31106 View details | Israel | IT | — | — | |
|
amicell.co.il zoominfo.com/c/amicell/426539109 Amicell (Amit Industries Ltd.) is a leading Israeli manufacturer founded in 1989, specializing in custom-designed battery packs, chargers, and Battery Management Systems (BMS). Headquartered in Ashdod, the company provides advanced energy solutions for demanding sectors, including defense, medical, UAVs, robotics, and industrial applications. With over 35 years of experience, Amicell is recognized for delivering reliable, high-tech power systems tailored to complex operational requirements |
||||||
| Ransomware | Paula Fish id31107 View details | Poland | Retail / E-commerce | — | — | |
|
Paulafish.pl is an e-commerce company based in Poland, operating in the retail sector. The company likely offers various products online to customers in Poland and possibly other countries. Paulafish.pl was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Paula Fish id31107 View details | Poland | Retail / E-commerce | — | — | |
|
paulafish.pl zoominfo.com/c/paula-fish/448451882 Paula Fish is a market leader in fish processing in Central Europe, headquartered in Słupsk, Poland. Founded in 1998, the company specializes in the catching, production, freezing, and storage of Baltic fish and Atlantic salmon. With a workforce of over 500 employees, it operates globally, emphasizing high-quality products, innovation, and strict environmental responsibility throughout its supply chain |
||||||
| Ransomware | Known id31108 View details | Iceland | IT | — | — | |
|
Known.is is an Icelandic company operating in the IT sector, providing various services. The company is based in Iceland and offers its services to clients. Known.is was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Known id31108 View details | Iceland | IT | — | — | |
|
known.is zoominfo.com/c/known/480652891 Known is an award-winning, data-driven marketing, creative, and media agency headquartered in New York. The company uniquely combines PhD data scientists with world-class creatives to deliver measurable performance and breakthrough brand strategies for major clients like Microsoft, TikTok, and Grubhub. Recognized by Ad Age and Adweek as a top-tier agency, Known is dedicated to setting a new standard for modern marketing through science-led innovation and rigorous analytics |
||||||
| Ransomware | Peachtree Group id31109 View details | United States | Finance / Legal / Insurance | — | — | |
|
Peachtree Group is a financial services company based in the United States, operating in the finance, legal, and insurance sector. The company provides various financial services to its clients. Peachtreegroup.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Peachtree Group id31109 View details | United States | Finance / Legal / Insurance | — | — | |
|
peachtreegroup.com zoominfo.com/c/peachtree-group/5000000011 Peachtree Group is a vertically integrated investment management firm headquartered in Atlanta, Georgia, with a history dating back to 1979. The company specializes in identifying mispriced risk and capitalizing on dislocated market opportunities across private credit, real estate, and equity investments. Managing billions in assets, Peachtree Group provides comprehensive financing solutions—including permanent loans, bridge financing, and mezzanine capital—while offering dedicated services to protect and grow its investments |
||||||
| Ransomware | Municipalidad de San Luis id31110 View details | Peru | Public Sector | — | — | |
|
Munisanluis.gob.pe is a government website in Peru, providing public services and information to citizens. As a public sector entity, it offers various online resources and functionalities. Munisanluis.gob.pe was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Municipalidad de San Luis id31110 View details | Peru | Public Sector | — | — | |
|
munisanluis.gob.pe zoominfo.com/c/municipalidad-de-san-luis/1322909314 The District Municipality of San Luis is the local government body for the San Luis district in Lima, Peru, dedicated to promoting the integral development and well-being of its residents. Its core mission is to lead, regulate, and provide essential public services while fostering community engagement through cultural, sports, and safety programs. The municipality actively modernizes its operations, offering digital platforms for online procedures and payments to ensure efficient, accessible, and transparent governance |
||||||
| Ransomware | World Wide Fittings id31111 View details | United Kingdom | Manufacturing / Engineering | — | — | |
|
Worldwidefittings.com operates in the manufacturing and engineering sector, providing various products and services to clients in the United Kingdom. As a key player in its industry, the company offers a range of fittings and related solutions. Worldwidefittings.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | World Wide Fittings id31111 View details | United Kingdom | Manufacturing / Engineering | — | — | |
|
worldwidefittings.com zoominfo.com/c/world-wide-fittings-inc/42729844 World Wide Fittings, Inc. is a global manufacturer of precision-engineered steel and stainless steel hydraulic tube and pipe fittings, founded in 1950 and headquartered in Vernon Hills, Illinois. Operating from nine facilities across three continents, the company supplies over 150 million components annually to OEMs and distributors in industries like automation, manufacturing, and fluid power. With a strong focus on in-house manufacturing, strict quality control, and vast in-stock inventory, they ensure reliable, on-time delivery of specialized fittings worldwide |
||||||
| Ransomware | Chemco Systems id31112 View details | United States | IT | — | — | |
|
Chemcosystems.net operates in the IT sector in the United States, providing various services. As a company in the IT sector, chemcosystems.net likely offers solutions related to information technology. Chemcosystems.net was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Chemco Systems id31112 View details | United States | IT | — | — | |
|
chemcosystems.net zoominfo.com/c/chemco-systems-lp/39588004 Chemco Systems is a world leader in the design and manufacturing of bulk chemical storage, handling, and feed systems for air and water pollution treatment, operating since 1980. The company provides tailored engineering, fabrication, and installation services, delivering innovative and cost-effective solutions without compromising safety or quality. With decades of industry experience, Chemco Systems is committed to superior product reliability, efficient customer service, and the continuous professional growth of its team |
||||||
| Ransomware | Total Auto Business Solutions id31113 View details | United States | IT | — | — | |
|
Autorepairsoftware.com is an IT company based in the United States, offering software solutions for the automotive repair industry. The company provides digital tools to facilitate efficient repair shop operations. Autorepairsoftware.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Total Auto Business Solutions id31113 View details | United States | IT | — | — | |
|
autorepairsoftware.com Total Auto Business Solutions, Inc. (TABS) is a leading provider of comprehensive shop management software, best known for its flagship product, AutoFluent. Founded in 2001 and based in Northern California, the company serves auto repair shops, tire dealers, and fleet operators across the US and Canada. Their all-in-one platform streamlines daily operations by seamlessly integrating scheduling, inventory management, accounting, and customer relationship tools into a single, user-friendly system |
||||||
| Ransomware | Okovolt Solartechnik id31114 View details | Germany | Energy | — | — | |
|
Oekovolt.com is an energy sector company based in Germany, providing services related to the energy industry. The company operates in the German energy market, offering various energy-related solutions. Oekovolt.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Okovolt Solartechnik id31114 View details | Germany | Energy | — | — | |
|
oekovolt.com Ökovolt Solartechnik GmbH is an Austrian company specializing in the planning, installation, and maintenance of photovoltaic systems for private, commercial, and industrial clients. Based in Upper Austria with over 15 years of experience, the firm provides comprehensive, customized solar energy solutions to promote sustainability and energy independence. They focus on high-quality components, expert consulting, and reliable service to maximize the efficiency and lifespan of every solar project |
||||||
| Ransomware | Pertamina id31115 View details | Indonesia | Energy | — | — | |
|
Pertamina.com is the official website of Pertamina, Indonesia's state-owned energy company, operating in the energy sector, providing various energy-related services and products in Indonesia. As a major player in the country's energy industry, Pertamina plays a significant role in the development and distribution of energy resources. Pertamina.com was listed as a ransomware victim associated with thegentlemen. |
||||||
| Ransomware | Pertamina id31115 View details | Indonesia | Energy | — | — | |
|
pertamina.com REV - $23.2 Billion zoominfo.com/c/pt-pertamina/191250883 Pertamina is an energy company primarily in the oil and gas sector. The company provides services for new and renewable energy, and other activities related to or supporting business activities. We have taken NDA files, HR DATA, user data, employee data, technical drawings, models, bank accounting tax legal statements, SCADA documents, confidential files, photographs of work, screenshots and much more the total data volume is more than 1.2TB+ 1200 GB+ . Pertamina is Indonesia’s state-owned integrated energy corporation, operating across upstream, downstream, gas, and renewable energy sectors. With over six decades of operation, it is a primary driver of national energy sovereignty and consistently ranks among the Fortune Global 500 companies. |
||||||
| Ransomware | Promatrix id31032 View details | United States | IT | — | — | |
|
Promatrixcorp.com is an IT company based in the United States, providing various IT services. As an IT sector entity, promatrixcorp.com operates in a critical industry. Promatrixcorp.com was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Promatrix id31032 View details | United States | IT | — | — | |
|
promatrixcorp.com zoominfo.com/c/promatrix-corp/347777611 Promatrix Corp is a rapidly growing IT consulting and outsourcing company based in New Jersey, USA. They deliver comprehensive global technology solutions, including web application development, managed IT services, and staff augmentation. The company also specializes in enterprise resource planning (SAP) support and HR outsourcing to help businesses optimize their operations and scale efficiently |
||||||
| Ransomware | Malaysian Nuclear Agency id31033 View details | Malaysia | Public Sector | — | — | |
|
Nuclearmalaysia.gov.my is a Malaysian government website related to nuclear energy. It provides information on nuclear energy, radiation safety, and related research in Malaysia. The website serves as a resource for the public sector, offering information on nuclear applications, safety, and regulations. Nuclearmalaysia.gov.my was listed as a ransomware victim associated with thegentlemen. |
||||||
| Ransomware | Malaysian Nuclear Agency id31033 View details | Malaysia | Public Sector | — | — | |
|
nuclearmalaysia.gov.my zoominfo.com/c/malaysian-nuclear-agency/459120141 The Malaysian Nuclear Agency (Nuklear Malaysia) is the leading government research and development organization in nuclear science and technology. It focuses on the peaceful application of nuclear innovations to support national development, including medical radiopharmaceuticals, food security, and industrial safety. Additionally, the agency plays a key role in radiation safety, human resource development, and the responsible management of radioactive waste in the country |
||||||
| Ransomware | Delkart Industries Pvt id31034 View details | India | Manufacturing / Engineering | — | — | |
|
Delkart Industries is a manufacturing and engineering company based in India, offering various products and services to its clients. The company operates in the manufacturing and engineering sector, providing solutions to its customers. Delkart Industries was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | Delkart Industries Pvt id31034 View details | India | Manufacturing / Engineering | — | — | |
|
delkartindustries.com zoominfo.com/c/delkart-industries-pvt-ltd/471455561 Delkart Industries is an Indian manufacturing company established in 2017, specializing in custom felts, automobile carpets, and noise and thermal insulation parts. The company serves the automotive, home appliance, robotics, and industrial sectors with high-quality, customized solutions. With multiple manufacturing plants across India and IATF 16949 / ISO 9001 certifications, it ensures reliability, innovation, and trusted partnerships with leading global brands |
||||||
| Ransomware | ETA Technology Pvt id31035 View details | India | IT | — | — | |
|
etatechnology.in is an Indian IT company providing various technology services. The company operates in the IT sector, offering its services to clients in India. etatechnology.in was listed as a ransomware victim associated with thegentlemen |
||||||
| Ransomware | ETA Technology Pvt id31035 View details | India | IT | — | — | |
|
etatechnology.in zoominfo.com/c/eta-technology-pvt-ltd/432054929 ETA Technology is a Bangalore-based manufacturing company founded in 1991, specializing in the design and production of advanced welding and forging equipment. They build rotary friction welders, friction stir welding systems, electrical upsetters, and custom test rigs for critical industries like automotive, aerospace, and e-mobility. With over 1,300 machines delivered to more than 20 countries, the company is known for its engineering precision, minimal rejection rates, and reliable global support |
||||||