Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1040 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1040 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-08-31 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1040 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 2 Onion service Down checked 57m ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion
    Leak location 1 Onion service Down checked 57m ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors (20)

    Victims (1040)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 1040.

    Type Target Discovered Country Business Category Intel Link
    Ransomware EP Manufacturing Bhd id32329 View details Malaysia IT
    Ransomware EP Manufacturing Bhd id32329 View details Malaysia IT
    Ransomware Saudi Consulting Services SAUD CONSULT id32330 View details Saudi Arabia Services
    Ransomware Saudi Consulting Services SAUD CONSULT id32330 View details Saudi Arabia Services
    Ransomware Glassdoor id32273 View details United States Services
    Ransomware Glassdoor id32273 View details United States Services
    Ransomware G R Infraprojects id32274 View details India IT
    Ransomware G R Infraprojects id32274 View details India IT
    Ransomware Northwest Trophy id32275 View details United States Services
    Ransomware Northwest Trophy id32275 View details United States Services
    Ransomware General Gruppo id32276 View details Italy Manufacturing / Engineering
    Ransomware General Gruppo id32276 View details Italy Manufacturing / Engineering
    Ransomware Ixa Systems id32277 View details Switzerland IT
    Ransomware Ixa Systems id32277 View details Switzerland IT
    Ransomware Tecno Accion id32278 View details Argentina IT
    Ransomware Tecno Accion id32278 View details Argentina IT
    Ransomware Probe Test System id32279 View details Taiwan, Province of China Services
    Ransomware Probe Test System id32279 View details Taiwan, Province of China Services
    Ransomware SUNSEA id32280 View details Thailand IT
    Ransomware SUNSEA id32280 View details Thailand IT
    Ransomware Thai Film Industries PCL id32281 View details Thailand IT
    Ransomware Thai Film Industries PCL id32281 View details Thailand IT
    Ransomware Adkisson Group id32282 View details United States IT
    Ransomware Adkisson Group id32282 View details United States IT
    Ransomware ESB Puerto Rico Corp id32283 View details Puerto Rico IT
    Ransomware ESB Puerto Rico Corp id32283 View details Puerto Rico IT
    Ransomware Nutrypollo id32284 View details Mexico Retail / E-commerce
    Ransomware Nutrypollo id32284 View details Mexico Retail / E-commerce
    Ransomware Brebur id32285 View details United Kingdom Retail / E-commerce
    Ransomware Brebur id32285 View details United Kingdom Retail / E-commerce
    Ransomware MB Associates id32286 View details United Kingdom Services
    Ransomware MB Associates id32286 View details United Kingdom Services
    Ransomware Exacta Optech Labcenter id32287 View details Brazil IT
    Ransomware Exacta Optech Labcenter id32287 View details Brazil IT
    Ransomware Servicios Aereos Estrella id32288 View details Mexico IT
    Ransomware Servicios Aereos Estrella id32288 View details Mexico IT
    Ransomware Zion Construction id32203 View details United States Construction / Real Estate
    Ransomware Zion Construction id32203 View details United States Construction / Real Estate
    Ransomware Party Rental id32154 View details United Kingdom Retail / E-commerce
    Ransomware Party Rental id32154 View details United Kingdom Retail / E-commerce
    Ransomware TEC Container id32155 View details Brazil IT
    Ransomware TEC Container id32155 View details Brazil IT
    Ransomware Verbux id32156 View details Germany Transportation / Travel / Logistics
    Ransomware Verbux id32156 View details Germany Transportation / Travel / Logistics
    Ransomware Espinos id32157 View details Mexico Energy
    Ransomware Espinos id32157 View details Mexico Energy
    Ransomware Incolur id32158 View details Chile Services
    Ransomware Incolur id32158 View details Chile Services
    Ransomware AGS Cinemas id32022 View details India Services
    Ransomware AGS Cinemas id32022 View details India Services
    Ransomware Eyecare Center of Snohomish id32023 View details United States Healthcare / Pharma
    Ransomware Eyecare Center of Snohomish id32023 View details United States Healthcare / Pharma
    Ransomware Gould Sherwood Consulting id32024 View details United States Services
    Ransomware Gould Sherwood Consulting id32024 View details United States Services
    Ransomware Espac id32025 View details Chile Services
    Ransomware Espac id32025 View details Chile Services
    Ransomware Layher id32026 View details Chile Services
    Ransomware Layher id32026 View details Chile Services
    Ransomware Volktek id32027 View details Singapore IT
    Ransomware Volktek id32027 View details Singapore IT
    Ransomware Volktek id32027 View details Taiwan, Province of China IT
    Ransomware Meridian Logistics Group id31958 View details United States
    Ransomware UOLconsult id31976 View details Brazil
    Ransomware UOLconsult id31976 View details Austria
    Ransomware dlp motive id31977 View details Germany
    Ransomware AWJ Holding id31978 View details United Arab Emirates
    Ransomware Lexacaucho id31979 View details
    Ransomware LOG Systems id31980 View details Poland
    Ransomware Magdalena Grand Beach Golf Resort id31981 View details Mexico
    Ransomware Akatake Engineering id31982 View details Japan
    Ransomware ESCON Group id31983 View details United States
    Ransomware Almeer id31984 View details United Arab Emirates
    Ransomware Geb Sas id31985 View details France
    Ransomware ARBEITERKAMMERN id31986 View details Austria
    Ransomware Aquasea id31987 View details Norway
    Ransomware CAZ Investments id31988 View details Belize
    Ransomware Oceanica Internacional id31989 View details Samoa
    Ransomware Ariel Energia id31990 View details Italy
    Ransomware BioPharma id31849 View details
    Ransomware BioPharma id31849 View details United States
    Ransomware P**** R***** id31850 View details
    Ransomware Euroscreen id31911 View details Italy
    Ransomware CRASL id31912 View details United Kingdom
    Ransomware Senvest Capital id31913 View details Canada
    Ransomware Roadvision Systems id31914 View details Sweden
    Ransomware Babcock id31915 View details South Africa
    Ransomware IPS id31673 View details Italy IT
    Ransomware IPS id31673 View details Italy IT
    Ransomware Gfeller Treuhand und Verwaltungs id31675 View details Switzerland
    Ransomware Gravity Coffee id31677 View details United States
    Ransomware Ollies Place Kidswear id31679 View details Australia
    Ransomware The Coffee Bean id31680 View details Malaysia
    Ransomware KFC Kosova id31681 View details
    Ransomware First Coast Heart Vascular Center id31682 View details United States
    Ransomware Cityside Homes id31683 View details United Kingdom
    Ransomware Retail Business Management Systems id31684 View details United Kingdom
    Ransomware TOA id31685 View details Japan
    Ransomware Tempel id31686 View details Germany
    Ransomware Plaza Auto Mall id31687 View details Mexico
    Ransomware Avanta Maroc Ex Adecco id31688 View details Morocco