Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1001 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1001 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-16 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1001 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 8 0.8%
  • Pending 993 99.2%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 1h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 1h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (20)

    Victims (1001)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 1001.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Martin LLP id34532 View details United Kingdom Services — pending
    Ransomware MAP SA id34533 View details Switzerland IT — pending
    Ransomware Suhai Segurana Pessoal id34534 View details Brazil Services — pending
    Ransomware SBI Audiovisual Medinbox id34535 View details Spain IT — pending
    Ransomware Saga University id34536 View details Japan Education — pending
    Ransomware Netcore Unbxd id34537 View details India IT — pending
    Ransomware REGiO Nord id34538 View details Germany Manufacturing / Engineering — pending
    Ransomware Museum Siam id34539 View details Thailand Education — pending
    Ransomware Skin Center id34540 View details United States Healthcare / Pharma — pending
    Ransomware Thai Ha PCL KASET id34541 View details Thailand Retail / E-commerce — pending
    Ransomware Inovar Packaging Group id34542 View details Australia Manufacturing / Engineering — pending
    Ransomware Engineers Ireland id34543 View details Ireland Manufacturing / Engineering — pending
    Ransomware North Bridge Venture Partners id34544 View details United States IT — pending
    Ransomware SONGWOOI id34545 View details Korea, Republic of Retail / E-commerce — pending
    Ransomware Petroleum Telcom Communications id34546 View details Pakistan Telecommunications — pending
    Ransomware Axle Logistics id34547 View details United States Transportation / Travel / Logistics — pending
    Ransomware CAS Paper Mill id34549 View details Canada Manufacturing / Engineering — pending
    Ransomware St Peters Anglican Primary School id34551 View details Australia Education — pending
    Ransomware Pantanal Agricola id34552 View details Brazil Agriculture / Food — pending
    Ransomware Sladek Partners id34554 View details Czechia IT — pending
    Ransomware JJS Justice id34555 View details United Kingdom Finance / Legal / Insurance — pending
    Ransomware ServiceMaster of Ottawa id34557 View details Canada Services — pending
    Ransomware Entry Systems Garage Doors Gates id34559 View details United States IT — pending
    Ransomware Europ Assistance South Africa id34560 View details South Africa Services — pending
    Ransomware Taiwan Otsuka Pharmaceutical id34562 View details Taiwan, Province of China Manufacturing / Engineering — pending
    Ransomware CLIMEDI id34563 View details Brazil Healthcare / Pharma — pending
    Ransomware Universidade de Passo Fundo id34565 View details Brazil Finance / Legal / Insurance — pending
    Ransomware Campbell Rhea id34566 View details United States Agriculture / Food — pending
    Ransomware Newport Beach Dentistry id34567 View details United States Healthcare / Pharma — pending
    Ransomware Tulsat id34568 View details Kazakhstan IT — pending
    Ransomware Shared Medical Technology id34569 View details United States Healthcare / Pharma — pending
    Ransomware Santa Barbara Endodontics id34570 View details United States Manufacturing / Engineering — pending
    Ransomware Ecuadors National Police id34571 View details Ecuador Public Sector — pending
    Ransomware Placer AI id33721 View details United States — — pending
    Ransomware BigID id33722 View details United States — pending
    Ransomware Confluent id33723 View details United States — pending
    Ransomware MoneyGram id33724 View details United States — pending
    Ransomware KFC id33725 View details United States — pending
    Ransomware Royal Thai Air Force id33694 View details Thailand — — pending
    Ransomware DW McMillan Memorial Hospital id33615 View details United States — — pending
    Ransomware Saskatoon Tribal Council id33616 View details Canada — — pending
    Ransomware Aquatech id33617 View details United States — — pending
    Ransomware AnyTech365 id33618 View details United Kingdom — — pending
    Ransomware Greenbrook Engineering id33619 View details United Kingdom — — pending
    Ransomware TGN id33620 View details Argentina — — pending
    Ransomware Galil Engineering id33621 View details Israel — — pending
    Ransomware Smart Value id33622 View details Belize — — pending
    Ransomware Kooltronic id33623 View details United States — — pending
    Ransomware Skyplan Services id33624 View details — — pending
    Ransomware Refako Autodele id33625 View details Denmark — — pending
    Ransomware SAS H2O MICHEL id33626 View details France — — pending
    Ransomware Husky Ltee id33627 View details Canada — — pending
    Ransomware Asessippi Ski Resort id33628 View details Canada — — pending
    Ransomware PIR Sales id33629 View details United States — — pending
    Ransomware Jentech Precision Industrial id33630 View details Taiwan, Province of China — — pending
    Ransomware Santee School District Foundation id33631 View details United States — — pending
    Ransomware University of Buraimi id33632 View details Oman — — pending
    Ransomware Ansonia Public Schools id33633 View details United States — — pending
    Ransomware All Souls St Gabriels School id33634 View details Australia — — pending
    Ransomware Rag Electric id33635 View details United States — — pending
    Ransomware Maverick Desk id33636 View details United States — — pending
    Ransomware Polishing Proz id33637 View details United States — — pending
    Ransomware Northwestern Polytechnic id33638 View details Canada — — pending
    Ransomware Machine sro id33639 View details Czechia — — pending
    Ransomware Ability Enterprise id33640 View details Taiwan, Province of China — — pending
    Ransomware Alcoholics Anonymous id33641 View details United States — — pending
    Ransomware Mabris id33642 View details France — — pending
    Ransomware Potomac Animal Hospital id33643 View details United States — — pending
    Ransomware The Law Office of James R Walsh id33644 View details United States — — pending
    Ransomware All Smiles Dental of Falls Church id33645 View details United States — — pending
    Ransomware Majestic Holidays India Private Limited id33646 View details India — — pending
    Ransomware Habbas Associates id33647 View details United States — — pending
    Ransomware Palma id33648 View details United States — — pending
    Ransomware MercyMed of Columbus id33649 View details United States — — pending
    Ransomware North Philadelphia Health System id33650 View details United States — — pending
    Ransomware Deloitte id33651 View details United States — pending
    Ransomware Center State Engineering id33439 View details United States Manufacturing / Engineering — pending
    Ransomware Aware id33423 View details United States IT — pending
    Ransomware WOOSHIN SAFETY SYSTEMS CO LTD id33425 View details Korea, Republic of IT — pending
    Ransomware Zelham id33427 View details United States IT — pending
    Ransomware Hospital de la Santa Creu i Sant Pau id33428 View details Spain Retail / E-commerce — pending
    Ransomware Rotamac id33429 View details Canada Healthcare / Pharma — pending
    Ransomware Mandurah State Emergency Service id33430 View details Australia Services — pending
    Ransomware Westrop Primary & Nursery School id33431 View details United Kingdom Education — pending
    Ransomware Gerrity Stone id33432 View details United States IT — pending
    Ransomware LegalWise id33294 View details South Africa Finance / Legal / Insurance — pending
    Ransomware Samwumed id33295 View details Korea, Republic of IT — pending
    Ransomware Edcon id33296 View details South Africa Services — pending
    Ransomware Defencebit id33297 View details United Kingdom IT — pending
    Ransomware Datacomm Services id33298 View details United States Telecommunications — pending
    Ransomware Webb Electric Company of Florida id33299 View details United States Services — pending
    Ransomware Solaria id33300 View details Indonesia Retail / E-commerce — pending
    Ransomware Auren id33301 View details Spain Services — pending
    Ransomware QUALITY SPORT Topsport Italia id33302 View details Italy Retail / E-commerce — pending
    Ransomware Europrim id33303 View details France Finance / Legal / Insurance — pending
    Ransomware Telrad Networks id33304 View details Israel IT — pending
    Ransomware Groupe APROSEP id33305 View details Senegal Services — pending
    Ransomware Drinks Wines Spirits id33306 View details Taiwan, Province of China Hospitality / Food & Beverage / Tourism — pending
    Ransomware Custom Rx Shoppe id33307 View details United States Healthcare / Pharma — pending
    Ransomware Williamson Dacar Associates id33308 View details United Kingdom Transportation / Travel / Logistics — pending