Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 787 published victims and 1 known leak locations in a single intelligence view.

Victims 787 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-07-28 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 138 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 787 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (787)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 201–300 of 787.

    Type Target Discovered Country Business Category Intel Link
    Ransomware International Freight Services id30179 View details United States IT
    Ransomware Royal Thai Navy Housing Cooperative id30180 View details Thailand Other
    Ransomware Royal Thai Navy Housing Cooperative id30180 View details Thailand Other
    Ransomware CTM India Limited motherson INDIA id30181 View details India Finance / Legal / Insurance
    Ransomware CTM India Limited motherson INDIA id30181 View details India Finance / Legal / Insurance
    Ransomware Hooke Laboratories id30182 View details United States IT
    Ransomware Hooke Laboratories id30182 View details United States IT
    Ransomware GIA Partners id30183 View details United States IT
    Ransomware GIA Partners id30183 View details United States IT
    Ransomware Rowley Properties id30184 View details United Kingdom Construction / Real Estate
    Ransomware Rowley Properties id30184 View details United Kingdom Construction / Real Estate
    Ransomware Canada Wide Media id30185 View details Canada Finance / Legal / Insurance
    Ransomware Canada Wide Media id30185 View details Canada Finance / Legal / Insurance
    Ransomware ErgoMed id30186 View details United Kingdom Healthcare / Pharma
    Ransomware ErgoMed id30186 View details United Kingdom Healthcare / Pharma
    Ransomware MBO GmbH id30187 View details Germany Manufacturing / Engineering
    Ransomware MBO GmbH id30187 View details Germany Manufacturing / Engineering
    Ransomware Meccanica Gn id30188 View details Italy Manufacturing / Engineering
    Ransomware Meccanica Gn id30188 View details Italy Manufacturing / Engineering
    Ransomware Al Dhow Group id30189 View details United Arab Emirates Transportation / Travel / Logistics
    Ransomware Al Dhow Group id30189 View details United Arab Emirates Transportation / Travel / Logistics
    Ransomware Beran Concrete id30190 View details Czechia Construction / Real Estate
    Ransomware Beran Concrete id30190 View details Czechia Construction / Real Estate
    Ransomware BDS CZ id30191 View details Czechia Finance / Legal / Insurance
    Ransomware BDS CZ id30191 View details Czechia Finance / Legal / Insurance
    Ransomware Stadttheater Giessen id30192 View details Germany Hospitality / Food & Beverage / Tourism
    Ransomware Stadttheater Giessen id30192 View details Germany Hospitality / Food & Beverage / Tourism
    Ransomware Gegenbauer Elektrotechnik id30193 View details Austria IT
    Ransomware Gegenbauer Elektrotechnik id30193 View details Austria IT
    Ransomware Bell Hardware id30194 View details United States Retail / E-commerce
    Ransomware Bell Hardware id30194 View details United States Retail / E-commerce
    Ransomware CHIFENG GOLD SEPON id30195 View details Lao People's Democratic Republic IT
    Ransomware CHIFENG GOLD SEPON id30195 View details Lao People's Democratic Republic IT
    Ransomware Natren id30196 View details United States Healthcare / Pharma
    Ransomware Natren id30196 View details United States Healthcare / Pharma
    Ransomware Au Vieux Campeur id30197 View details France Retail / E-commerce
    Ransomware Au Vieux Campeur id30197 View details France Retail / E-commerce
    Ransomware Ayres Carr & Sullivan, P.C. id30198 View details United States IT
    Ransomware Ayres Carr & Sullivan, P.C. id30198 View details United States IT
    Ransomware Immling id30199 View details Germany Retail / E-commerce
    Ransomware Immling id30199 View details Germany Retail / E-commerce
    Ransomware DHC Corporation id30200 View details Japan Retail / E-commerce
    Ransomware DHC Corporation id30200 View details Japan Retail / E-commerce
    Ransomware Steegaa Interior id30201 View details United Arab Emirates Other
    Ransomware Steegaa Interior id30201 View details United Arab Emirates Other
    Ransomware Indra Group id30202 View details Spain IT
    Ransomware Indra Group id30202 View details Spain IT
    Ransomware Climax Technology id30203 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Climax Technology id30203 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Centre Ophtalmologique dErmont id30204 View details France Healthcare / Medicine
    Ransomware Centre Ophtalmologique dErmont id30204 View details France Healthcare / Medicine
    Ransomware Comp Trading Co id30205 View details Thailand
    Ransomware Mondottica id30206 View details Italy
    Ransomware OSP HOLDING FRANCE id30207 View details France
    Ransomware NATURGHIACCIO id30208 View details Italy
    Ransomware MakoLab id30209 View details Poland
    Ransomware EMAS Group id30210 View details Czechia
    Ransomware The City of Boyne City id30211 View details United States
    Ransomware Oron Law Firm id30212 View details Switzerland
    Ransomware Oron Law Firm id30212 View details Switzerland
    Ransomware Wacha Justen id30213 View details Nicaragua
    Ransomware CUI Agency id30214 View details United States
    Ransomware Melcor Developments Ltd id30215 View details Canada
    Ransomware FAC Logistique id30216 View details France
    Ransomware SDEZ id30217 View details France
    Ransomware Pou Sheng International id30218 View details Taiwan, Province of China
    Ransomware Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik id30055 View details Germany IT
    Ransomware Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik id30055 View details Germany IT
    Ransomware hiddenn id30042 View details
    Ransomware Vera Chimie Management id30043 View details France
    Ransomware Alexander Buch Bilanzbuchhalter id30044 View details Germany
    Ransomware SGS Malaysia id30045 View details Malaysia
    Ransomware TERRIO Therapy Fitness id30046 View details Mexico
    Ransomware Ty Thac Co id30047 View details Viet Nam Healthcare / Pharma
    Ransomware Amigest id30048 View details France
    Ransomware Yudu Technology id30049 View details Singapore
    Ransomware Burris MacOmber id30050 View details United States
    Ransomware Sertrans id30051 View details Spain
    Ransomware Cofaq id30052 View details France
    Ransomware Al Khaja Holding id30053 View details United Arab Emirates
    Ransomware Athens Orthopedic Clinic id30055 View details United States
    Ransomware Enciso Ltda id29870 View details Chile Other
    Ransomware South Texas Spinal Clinic id29871 View details United States Healthcare / Medicine
    Ransomware Mahajak Development id29872 View details Thailand Manufacturing / Engineering
    Ransomware Calipage Humblet id29873 View details Belgium IT
    Ransomware Ministarstvo zdravstva Republike Hrvatske id29874 View details Croatia Public Sector
    Ransomware Palmer Sicard id29875 View details Finance / Legal / Insurance
    Ransomware Linnecken Partner id29876 View details Germany Finance / Legal / Insurance
    Ransomware Centre Medical Crowley id29877 View details Canada Healthcare / Medicine
    Ransomware Executive Coach id29878 View details United States Services
    Ransomware Mackay Sugar id29879 View details Australia Agriculture / Food
    Ransomware SigmaControl id29880 View details Netherlands Manufacturing / Engineering
    Ransomware Buratti id29881 View details Italy Manufacturing / Engineering
    Ransomware National Museum id29882 View details Denmark Public Sector
    Ransomware Times Software id29883 View details Singapore IT
    Ransomware Traublinger id29884 View details Germany Manufacturing / Engineering
    Ransomware Fecovita id29885 View details Argentina Healthcare / Pharma
    Ransomware Constructions Piraino id29886 View details France Other
    Ransomware Kozminski University id29887 View details Poland Education
    Ransomware Cole Manufacturing id29888 View details United States Manufacturing / Engineering