Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 716 published victims and 1 known leak locations in a single intelligence view.

Victims 716 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-07-17 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 120 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 716 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (716)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 716.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Military Sealift Command id30646 View details United States Transportation / Travel / Logistics
    Ransomware Military Sealift Command id30646 View details United States Transportation / Travel / Logistics
    Ransomware Advantage Home Health Care id30647 View details United States Healthcare / Medicine
    Ransomware Advantage Home Health Care id30647 View details United States Healthcare / Medicine
    Ransomware Sunway Scientific id30648 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Sunway Scientific id30648 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Tangram Interiors id30614 View details United Kingdom Construction / Real Estate
    Ransomware Tangram Interiors id30614 View details United Kingdom Construction / Real Estate
    Ransomware BRAC id30615 View details Bangladesh NGOs / Associations
    Ransomware BRAC id30615 View details Bangladesh NGOs / Associations
    Ransomware Customs Watch id30616 View details United States Retail / E-commerce
    Ransomware Customs Watch id30616 View details United States Retail / E-commerce
    Ransomware Gallant id30617 View details Finland IT
    Ransomware Gallant id30617 View details Finland IT
    Ransomware Hanseata id30618 View details Germany Finance / Legal / Insurance
    Ransomware Hanseata id30618 View details Germany Finance / Legal / Insurance
    Ransomware Metro Mondego id30595 View details Portugal Transportation / Travel / Logistics
    Ransomware Metro Mondego id30595 View details Portugal Transportation / Travel / Logistics
    Ransomware Comet Enterprise Corp id30596 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Comet Enterprise Corp id30596 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Landesbibliothek Coburg id30597 View details Germany Education
    Ransomware Landesbibliothek Coburg id30597 View details Germany Education
    Ransomware ALUFE Femszerkezeti Kft id30598 View details Hungary Manufacturing / Engineering
    Ransomware ALUFE Femszerkezeti Kft id30598 View details Hungary Manufacturing / Engineering
    Ransomware Tooltec id30599 View details Sweden Manufacturing / Engineering
    Ransomware Tooltec id30599 View details Sweden Manufacturing / Engineering
    Ransomware Terra Vitis id30600 View details France Agriculture / Food
    Ransomware Terra Vitis id30600 View details France Agriculture / Food
    Ransomware Vignobles Toutigeac id30601 View details France Other
    Ransomware Vignobles Toutigeac id30601 View details France Other
    Ransomware Dink Co Ltd id30602 View details Japan IT
    Ransomware Dink Co Ltd id30602 View details Japan IT
    Ransomware Lsn id30604 View details IT
    Ransomware Lsn id30604 View details IT
    Ransomware Giraudi Group id30605 View details Italy
    Ransomware Giraudi Group id30605 View details Italy
    Ransomware Mesto Celakovice id30606 View details Czechia
    Ransomware Mesto Celakovice id30606 View details Czechia
    Ransomware Kaneko id30607 View details Japan Manufacturing / Engineering
    Ransomware Kaneko id30607 View details Japan Manufacturing / Engineering
    Ransomware Byggelit Sverige id30608 View details Sweden
    Ransomware Byggelit Sverige id30608 View details Sweden
    Ransomware Terry P Moosmann CPA PC id30609 View details United States
    Ransomware Terry P Moosmann CPA PC id30609 View details United States
    Ransomware Royal Foods id30475 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Royal Foods id30475 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Ferretería Scopazzo id30476 View details Argentina Retail / E-commerce
    Ransomware Ferretería Scopazzo id30476 View details Argentina Retail / E-commerce
    Ransomware Fortray id30477 View details IT
    Ransomware Fortray id30477 View details IT
    Ransomware Martin Cava id30478 View details Spain Other
    Ransomware Martin Cava id30478 View details Spain Other
    Ransomware Aveiro Constructors Limited id30479 View details Portugal Construction / Real Estate
    Ransomware Aveiro Constructors Limited id30479 View details Portugal Construction / Real Estate
    Ransomware Triquesta id30480 View details Mexico IT
    Ransomware Triquesta id30480 View details Mexico IT
    Ransomware Vicenzi Group id30481 View details Italy Agriculture / Food
    Ransomware Vicenzi Group id30481 View details Italy Agriculture / Food
    Ransomware Energon id30482 View details Czechia Energy
    Ransomware Energon id30482 View details Czechia Energy
    Ransomware Open Options id30483 View details Ireland IT
    Ransomware Open Options id30483 View details Ireland IT
    Ransomware INTERNET AG id30484 View details Germany IT
    Ransomware INTERNET AG id30484 View details Germany IT
    Ransomware Crossroads Medical Management id30485 View details United States Healthcare / Medicine
    Ransomware Crossroads Medical Management id30485 View details United States Healthcare / Medicine
    Ransomware Pharma Wholesale id30486 View details Healthcare / Pharma
    Ransomware Pharma Wholesale id30486 View details Healthcare / Pharma
    Ransomware Pharma Wholesale id30486 View details United States Healthcare / Pharma
    Ransomware Welders Supply Equipment Rentals id30487 View details United States Construction / Real Estate
    Ransomware Welders Supply Equipment Rentals id30487 View details United States Construction / Real Estate
    Ransomware VASBE id30488 View details Russian Federation IT
    Ransomware VASBE id30488 View details Russian Federation IT
    Ransomware Gene Codes Forensics id30489 View details United States Healthcare / Medicine
    Ransomware Gene Codes Forensics id30489 View details United States Healthcare / Medicine
    Ransomware Lopes Law id30490 View details United States Finance / Legal / Insurance
    Ransomware Lopes Law id30490 View details United States Finance / Legal / Insurance
    Ransomware Carita id30491 View details France Retail / E-commerce
    Ransomware Carita id30491 View details France Retail / E-commerce
    Ransomware BDO Greece id30492 View details Greece Finance / Legal / Insurance
    Ransomware BDO Greece id30492 View details Greece Finance / Legal / Insurance
    Ransomware Dash Door Glass id30493 View details United States IT
    Ransomware Dash Door Glass id30493 View details United States IT
    Ransomware Shamrock Holdings Inc. id30327 View details United States IT
    Ransomware Shamrock Holdings Inc. id30327 View details United States IT
    Ransomware Medic Rescue id30328 View details United States NGOs / Associations
    Ransomware Medic Rescue id30328 View details United States NGOs / Associations
    Ransomware LogiQuip id30329 View details United Kingdom Manufacturing / Engineering
    Ransomware LogiQuip id30329 View details United Kingdom Manufacturing / Engineering
    Ransomware Virginia Historical Society id30330 View details United States NGOs / Associations
    Ransomware Virginia Historical Society id30330 View details United States NGOs / Associations
    Ransomware Quanterm Logistics Sdn Bhd id30331 View details Malaysia IT
    Ransomware Quanterm Logistics Sdn Bhd id30331 View details Malaysia IT
    Ransomware Spedidam id30332 View details France Services
    Ransomware Spedidam id30332 View details France Services
    Ransomware hiddeenn id30333 View details Other
    Ransomware hiddeenn id30333 View details Other
    Ransomware Arabia Falcon Insurance Company SAOG id30334 View details Oman Finance / Legal / Insurance
    Ransomware Arabia Falcon Insurance Company SAOG id30334 View details Oman Finance / Legal / Insurance
    Ransomware Ce Ratp Comite D entreprise Ratp id30335 View details France Other