Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1040 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1040 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-08-31 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1040 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 2 Onion service Down checked 2h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion
    Leak location 1 Onion service Down checked 2h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors (20)

    Victims (1040)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 901–1000 of 1040.

    Type Target Discovered Country Business Category Intel Link
    Ransomware BAM - Brand Art Media id26254 View details Germany Communication / Marketing
    Ransomware Gady Family id26253 View details Austria Agriculture / Food
    Ransomware Dome Partners id26252 View details United States Construction / Real Estate
    Ransomware Chonburi Provincial Administration id26251 View details Thailand Communication / Marketing
    Ransomware Torus id26250 View details United States Healthcare / Pharma
    Ransomware PLUS Malaysia Berhad id26249 View details Malaysia Communication / Marketing
    Ransomware EXIM Bank id26248 View details United States Finance / Legal / Insurance
    Ransomware Ankara-İzmir id26247 View details Türkiye Transportation / Travel / Logistics
    Ransomware Trace id26246 View details France Retail / E-commerce
    Ransomware Far East id26245 View details Thailand Retail / E-commerce
    Ransomware Thin Red Line id26109 View details China IT
    Ransomware Handsome Manufacturing id26043 View details Hong Kong Manufacturing / Engineering
    Ransomware Nobel Hygiene Pvt id26042 View details India Communication / Marketing
    Ransomware Wieson Technologies id26013 View details Taiwan, Province of China IT
    Ransomware Lawsoft id26010 View details United States Finance / Legal / Insurance
    Ransomware Hydrometrics id26009 View details United States Communication / Marketing
    Ransomware Röben Tonbaustoffe GmbH id26008 View details Germany Communication / Marketing
    Ransomware Abatix id26007 View details United States Manufacturing / Engineering
    Ransomware MBM id25754 View details Poland Communication / Marketing
    Ransomware Bluemega id25660 View details France Services
    Ransomware Sibca id25659 View details United Arab Emirates Communication / Marketing
    Ransomware Garko id25658 View details Czechia Communication / Marketing
    Ransomware Casa de España id25657 View details Mexico Communication / Marketing
    Ransomware Sincere Corporation id25656 View details Japan Services
    Ransomware Unimed Anápolis id25655 View details Brazil Healthcare / Pharma
    Ransomware SASI JSC id25652 View details Viet Nam Manufacturing / Engineering
    Ransomware Autofinanciera id25651 View details Colombia Finance / Legal / Insurance
    Ransomware CPF Financial Services id25650 View details Kenya Finance / Legal / Insurance
    Ransomware Orlík Compressors id25649 View details Czechia Communication / Marketing
    Ransomware USTAR id25648 View details China Communication / Marketing
    Ransomware Magen Eco Energy id25647 View details Israel Energy
    Ransomware WRP Asia Pacific Sdn Bhd id25646 View details Malaysia Communication / Marketing
    Ransomware Witzenberg Municipality id25645 View details South Africa Public Sector
    Ransomware Sita Sud id25644 View details Italy Transportation / Travel / Logistics
    Ransomware Rola Motor Group id25643 View details South Africa Communication / Marketing
    Ransomware Paltrack id25642 View details South Africa IT
    Ransomware Lotus Bedding id25641 View details Thailand Communication / Marketing
    Ransomware Shtainmetz Aminoach id25640 View details Israel Finance / Legal / Insurance
    Ransomware BIB Insurance Brokers id25639 View details United Kingdom Finance / Legal / Insurance
    Ransomware Ayuntamiento de Beniel id25638 View details Spain Public Sector
    Ransomware British School of Brasilia id25637 View details Brazil Education
    Ransomware Eurotex id25636 View details Türkiye Communication / Marketing
    Ransomware [Redacted] #1930 id25723 View details Türkiye Other
    Ransomware San Carlo Gruppo Alimentare id25614 View details Italy Communication / Marketing
    Ransomware Kontena Nasional Berhad id25613 View details Malaysia Transportation / Travel / Logistics
    Ransomware PAO HWA TRADING LTD id25609 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Dongguan HYX Industrial id25556 View details China Manufacturing / Engineering
    Ransomware Rogers Capital id25508 View details Mauritius Services
    Ransomware Real Tech id25430 View details Canada IT
    Ransomware Dsm Information Technology Trade Ltd. id25429 View details United Kingdom IT
    Ransomware Pos Bilişim Teknolojileri id25428 View details Türkiye Communication / Marketing
    Ransomware Dekoyap id25424 View details Türkiye Retail / E-commerce
    Ransomware Warka Bank for Investment and Finance id25423 View details Iraq Finance / Legal / Insurance
    Ransomware Hog Slat id25422 View details United States Agriculture / Food
    Ransomware DTI Foreign Trade Service Corps id25421 View details Philippines Services
    Ransomware Wamtechnik id25352 View details Poland IT
    Ransomware Systherm Grupa id25351 View details Poland Manufacturing / Engineering
    Ransomware Hart id25350 View details Poland Communication / Marketing
    Ransomware Complexul Energetic Oltenia id25346 View details Romania Energy
    Ransomware Stewart Engenharia id25225 View details Brazil IT
    Ransomware BioNet-Asia id25220 View details Thailand Communication / Marketing
    Ransomware Usina Sao Jose Do Pinheiro id25054 View details Brazil Agriculture / Food
    Ransomware Ever Green Industria e Comercio Ltda id25053 View details Brazil Healthcare / Pharma
    Ransomware All Rush id25052 View details Canada Communication / Marketing
    Ransomware Santa Casa de Assis id25051 View details Brazil Healthcare / Pharma
    Ransomware Solus Tecnologia em Sistemas LTDA id25050 View details Brazil Communication / Marketing
    Ransomware HSR Specialist Researchers id25049 View details United Kingdom Services
    Ransomware ********.com id24939 View details Communication / Marketing
    Ransomware Flavor Producers id24921 View details United States Communication / Marketing
    Ransomware Solumek id24912 View details United States Services
    Ransomware *****.com id24720 View details Retail / E-commerce
    Ransomware ***.*** LAST TIMER UPDATE id24683 View details Finance / Legal / Insurance
    Ransomware Everbiz Industrial Co. Ltd. id24296 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Devereux Advanced Behavioral Health id24286 View details United States Healthcare / Pharma
    Ransomware Ecuacorriente S.A. id24189 View details Ecuador Communication / Marketing
    Ransomware Talarico id24181 View details Italy Manufacturing / Engineering
    Ransomware NBCAPITAL JOINT STOCK COMPANY id24167 View details Viet Nam Finance / Legal / Insurance
    Ransomware Singapore City Development Company Limited (SINGCONS) id24166 View details Singapore Construction / Real Estate
    Ransomware AiHealth id24165 View details United States Healthcare / Pharma
    Ransomware KIM Dental id24164 View details Germany Healthcare / Pharma
    Ransomware Pacific Holdings Group JSC. id24161 View details Viet Nam Healthcare / Pharma
    Ransomware Sansala id24125 View details Spain Communication / Marketing
    Ransomware Colliers id24123 View details Canada Services
    Ransomware ***.*** id23996 View details Finance / Legal / Insurance
    Ransomware AkroStar Technology Co., Ltd. Akrostar id23938 View details Switzerland IT
    Ransomware A***-****.com id23937 View details Other
    Ransomware ************.com id23929 View details Other
    Ransomware United Enterprise Fund id23927 View details United States Communication / Marketing
    Ransomware *******.com id23825 View details Other
    Ransomware DRD Communications id23651 View details United States Communication / Marketing
    Ransomware St Stephen's International id23592 View details Thailand Education
    Ransomware Silverlake Axis id23515 View details Malaysia IT
    Ransomware Donacoop (VinaCapital) id23352 View details Viet Nam Construction / Real Estate
    Ransomware PT Pupuk Iskandar Muda id23278 View details Indonesia Agriculture / Food
    Ransomware Madagascar Airlines id23183 View details Madagascar Transportation / Travel / Logistics
    Ransomware ICET Studios id23099 View details Italy Communication / Marketing
    Ransomware Personal Collection id22912 View details Philippines Communication / Marketing
    Ransomware Seguros la Cmara id22870 View details Argentina Finance / Legal / Insurance
    Ransomware 2GO Group id22815 View details Philippines Transportation / Travel / Logistics
    Ransomware AUSA Soluciones Logisticas id22796 View details Argentina Transportation / Travel / Logistics