Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 1040 published victims and 2 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Thegentlemen is tracked by Breach House as a ransomware group with 1040 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 2 | Onion service | Down checked 1h ago | i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion |
| Leak location 1 | Onion service | Down checked 1h ago | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
Top Activity Sectors (20)
- IT 110
- Manufacturing / Engineering 103
- Communication / Marketing 88
- Healthcare / Pharma 66
- Finance / Legal / Insurance 50
- Retail / E-commerce 49
- Construction / Real Estate 48
- Services 38
- Transportation / Travel / Logistics 27
- Not identified 27
- Agriculture / Food 23
- Education 21
- Public Sector 20
- Energy 18
- NGOs / Associations 12
- Hospitality / Food & Beverage / Tourism 12
- Telecommunications 6
- Media / Entertainment 1
- Law Enforcement / Public Sector 1
- Research 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Thegentlemen, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: thegentlemen executes PowerShell scripts to run payload logic, disable defenses, and propagate across systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: thegentlemen modifies registry run keys and startup locations to maintain persistence after reboots.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: thegentlemen disables or modifies security tools such as EDR and AV processes to hinder incident response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: thegentlemen deletes Volume Shadow Copies and backup artifacts via system commands to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1003.001 LSASS Memory Credential Access
What they do: thegentlemen accesses LSASS memory to steal credentials for lateral movement and privilege escalation.
What that means: Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
-
T1135 Network Share Discovery Discovery
What they do: thegentlemen uses network share discovery to locate victim file shares and map accessible storage paths for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: thegentlemen uses SMB/Windows Admin Shares for lateral movement between networked hosts in manufacturing and IT environments.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: thegentlemen encrypts victim files and data stores using ransomware payloads to maximize impact and extortion pressure.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: thegentlemen calls system recovery inhibitors to block restore processes and harden ransomware impact.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
-
T1491.001 Internal Defacement Impact
What they do: thegentlemen performs internal defacement by replacing victim files with ransom notes and altered content.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (40)
▼Software Thegentlemen has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
DumpBrowserSecrets
KslKatz
Mimikatz
Defense evasion
EDRStartupHinder
KslDump
PowerRun
RedSun
ThrottleStop driver (BYOVD)
Discovery & enumeration
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
Nmap
MANSPIDER
PrivHound
RelayKing-Depth
Shodan
TaskHound
Exfiltration
RClone
WinSCP
LOLBAS (living-off-the-land binaries)
PsExec
Networking & tunnelling
Amnezia VPN
Chisel
Cloudflared
OpenVPN
Proxychains
PuTTY
Wireguard VPN
Offensive security tooling
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
Remote monitoring & management
AnyDesk
FreeRDP
MeshAgent
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-GENTLEMEN_3.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 13343E50C1B3466F0EA35B5B3E55A044CB7132FD28A8665EFEA0E5848E276D548C21B79F15C2 Download Tox messenger: https://tox.chat/download.html Contact us (add via SimpleX): https://smp14.simplex.im/a#4mlOiePV8NBXOv2QrZ9CaPeRPm1mBUgxn4SdpFnm978 Download SimpleX https://simplex.chat/downloads/ СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/TheGentlemen26 Clearnet blog link: https://thegentlemen.cc/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats. We have stolen more than 100 GB of your corporate information from your servers, including critically important data. Your company is facing a massive information security breach. A total data leak has occurred. This greatly increases the risk of colossal financial and reputational losses.
README-GENTLEMEN_2.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 98C132E2B20B531BE6604397D97040C1E9EB42FCE12EDF119BCE8B4031CA5C70DAF5E65FA3C3 Download Tox messenger: https://tox.chat/download.html Contact us (add via Session ID): 05809b2da1d5b1a302f48b5767fd1843d54f3c516f9ab0eb26b544ffa73340292e Download Session https://getsession.org СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats.
README-GENTLEMEN.txt
[snip] = YOUR ID Gentlemen, your network is under our full control. All your files are now encrypted and inaccessible. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E Download Tox messenger: https://tox.chat/download.html COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1040)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 1001–1040 of 1040.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Astra Otoparts / PT. Inti Ganda Perdana id22789 View details | Indonesia | Manufacturing / Engineering | ||
|
Stock Symbol AUTO.JK www.astra-otoparts.com http://www.igpgroup.astra.co.id https://www.zoominfo.com/c/pt-astra-otoparts-tbk/344291036 https://rocketreach.co/pt-inti-ganda-perdana-profile_b5c1ba2ff42e08d3 20 billion USD revenue. Astra Otoparts is an Indonesia-based manufacturing company. The Company is engaged in the trading of automotive components for domestic and international markets, including other Asian countries, the Middle East and Africa. It is also engaged in the manufacture of metal, automotive components and plastics. PT. Inti Ganda Perdana mainly manufactures rear axle and propeller shafts, and has decided on its mission to become a reliable drive shaft and drive axle manufacturer, with a vision to become a company with competitive advantage on the global market. |
|||||
| Ransomware | Al-Babtain Power & Telecommunication id22652 View details | Saudi Arabia | Telecommunications | ||
|
Stock Symbol 2320. www.al-babtain.com.sa http://www.albabtain-egypt.com/ Al-Babtain Power & Telecom was established as a family run business in 1955. Over the decades, Al-Babtain has expanded into different countries and diversified into different industries. Here is a map of our journey to become one of the top 100 companies in Saudi Arabia. Al Babtain Power & Telecommunication (ABP&T) was founded in 1955. It is one of the largest manufacturers and suppliers in the field of outdoor lighting, Transmission & Distribution & Telecommunication Footprints. |
|||||
| Ransomware | Thai Future Inc. PCL id22604 View details | Thailand | Communication / Marketing | ||
|
Stock symbol TFI. https://www.pm-groups.com/en/tfi.php https://thaifutureinc.com https://www.zoominfo.com/c/thai-film-industries-public-company-ltd/346313029 Thai Future Incorporation (TFI) was originally established under the name of Rachadachai O.P.P. Co., Ltd. on March 3, 1983. It was Thailand's and Southeast Asia's first BOPP film manufacturing facility to supply a fast-growing packaging industry, local and overseas. Thai Film Industries specializes in the production and distribution of films in Thailand. The company offers a range of services including film production, post-production, and marketing. Their intended clients include filmmakers, distributors, and audiences interested in Thai cinema. With a focus on promoting local talent and stories, they aim to enhance the visibility of Thai films both domestically and internationally. |
|||||
| Ransomware | Cadisa id22548 View details | Guatemala | Communication / Marketing | ||
|
www.cadisa.mx https://www.zoominfo.com/c/cadisa-sa/455575374 Cadisa is a comprehensive service provider specializing in the sale and maintenance of trucks for various industries, offering a wide array of truck models including LT, CT, MV, HV, and City series. They provide original diesel spare parts, tailored maintenance plans, and 24/7 assistance, ensuring customers receive support throughout the truck's lifecycle. Their services also include a dedicated monitoring platform for real-time vehicle tracking and roadside assistance for unexpected repairs. Cadisa prioritizes customer satisfaction by ensuring that clients have access to expert advice and quality services to keep their trucks operational. |
|||||
| Ransomware | ARMONIA MEDICAL S.A.S. id22454 View details | Colombia | Communication / Marketing | ||
|
Armonia Medical S.A.S es una empresa en Colombia, con sede principal en Santa Marta. Opera en Servicios de Salud Móviles sector. La empresa fue fundada en 24 de febrero de 2012. Actividades de la práctica médica sin internación, Peluquería y otros tratamientos de belleza, Comercio al por menor de productos farmacéuticos y medicinales cosméticos y artículos de tocador en establecimientos especializados https://armoniaips.com |
|||||
| Ransomware | Instituto Socio-Económico Comunitario (INSEC) id22442 View details | Nepal | Services | ||
|
INSEC offer integrated services, educational tools, and multi-sector partnerships through programs focused on economic development, community development, employment training, and integrated support services. Their mission is to transform lives and strengthen communities by providing workshops, grants, and direct assistance to those in need. INSEC aims to be a leading organization in community services, developing innovative programs that make a tangible impact. https://insec.org/ |
|||||
| Ransomware | SV-Büro Ing. Schulz GmbH id22418 View details | Germany | Transportation / Travel / Logistics | ||
|
Seit vielen Jahren befassen wir uns als erfolgreiches Unternehmen mit der Gutachtenerstellung in den Bereichen KFZ, LKW, Zweirad, Oldtimer, Sondermaschinen, Transportschäden, Havarie, Verpackungsbeurteilung, Wasserfahrzeugen sowie Schäden an Verkehrsleiteinrichtungen. Ebenfalls ist unser Unternehmen spezialisiert auf Großschäden im KFZ-Bereich (Hagelschlag, Hochwasser), Schadenregulierung, Regressabwicklung sowie Seminare zum Thema Ladungssicherung nach VDI 2700a. Weiters garantiert unser firmeneigenes Qualitätsmanagement, zertifiziert nach EN ISO 9001:2008, dass die Qualitätsstandards unserer Auftraggeber strikt eingehalten werden. |
|||||
| Ransomware | Cervantes id22226 View details | Argentina | Communication / Marketing | ||
|
https://www.cervantes.edu.ar , Con una gran trayectoria como referentes en la educación privada de Córdoba, Cervantes mantiene el compromiso de adaptar su propuesta educativa a las necesidades del contexto actual. Hoy, más de 2 mil estudiantes eligen pertenecer a la #ComunidadIC, esta casa de estudios que apuesta constantemente a la innovación educativa. |
|||||
| Ransomware | Ceres id22225 View details | Uruguay | Communication / Marketing | ||
|
www.ceres-uy.org , ceres.uy , https://www.zoominfo.com/c/ceres/458476148 ¿Qué es CERES? CERES (Centro de Estudios de la Realidad Económica y Social) es un centro de investigación independiente y sin fines de lucro, dedicado al análisis económico de las economías de América Latina, al diseño de políticas públicas y a promover su debate a nivel local y en foros internacionales. Visión Por un crecimiento con igualdad de oportunidades. Misión Contribuir a generar y debatir una agenda de políticas públicas capaces de promover el desarrollo económico y social en América Latina, mediante un trabajo de investigación y análisis innovador e independiente |
|||||
| Ransomware | BIOLAP Soluciones Médicas id22224 View details | Mexico | Healthcare / Pharma | ||
|
www.biolapsa.com , https://www.zoominfo.com/c/biolap-soluciones-me%CC%81dicas/439166866 , Biolap Soluciones Médicas is a company specializing in the marketing of surgical medical supplies with over 15 years of experience in the market. They aim to be recognized as the best provider of differentiated quality services and high-tech products in the medical device sector. Their vision is to provide healthcare professionals with high-quality medical solutions and innovations that enhance patient well-being. Their mission focuses on improving patient lives by offering the highest quality instruments and equipment to healthcare providers |
|||||
| Ransomware | Proplastics id22223 View details | Zimbabwe | Manufacturing / Engineering | ||
|
www.proplastics.co.zw , https://www.zoominfo.com/c/proplastics-ltd/395663229 Proplastics is a leading supplier of world class plastic pipe systems for water and sewer reticulation to SouthernAfrica. Established in 1965, Proplastics has 50 years of experience in the industry and has grown and evolved on the back of its philosophy of constant and never ending improvement to become the leading player in Zimbabwe with a significant market share in the SADC region. |
|||||
| Ransomware | Kandeo id22222 View details | Colombia | Services | ||
|
www.kandeofund.com , https://diaphanum.pe/ , https://www.zoominfo.com/c/kandeo/355444055 Kandeo is focused on providing innovative solutions to enhance growth for businesses. Their product offerings are designed to empower companies to achieve brilliance in their operations. The intended clients range from small startups to large corporations seeking to optimize their business strategies. By leveraging advanced technologies, Kandeo aims to drive success and foster sustainable development. |
|||||
| Ransomware | Ransomware Recover Indonesia id22221 View details | Indonesia | IT | ||
|
https://recoveryransomwareindonesia.com Gentlemen, if you want to waste your time, test our cryptographic strength, and spend your money—go ahead and contact Ransomware Recover Indonesia. Tested with our own software – pwn3d! |
|||||
| Ransomware | JN Aceros id22220 View details | Colombia | Other | ||
|
www.jnaceros.com.pe, https://www.zoominfo.com/c/jn-aceros/455686474, JN Aceros is a company that operates in the HR & Staffing industry. It employs 50to99 people and has 100MMto250M of revenue. The company is headquartered in San Luis, Lima region, Peru. |
|||||
| Ransomware | Flexofast Indonesia id22219 View details | Indonesia | Communication / Marketing | ||
|
www.flexofast.com , https://www.zoominfo.com/c/flexofast-indonesia/556142095 , Flexofast serves as a premier logistics partner for brands and companies in Indonesia, providing innovative and customized solutions to enhance their operational capabilities. The company emphasizes fast, reliable, and sustainable logistics services, aligning with its commitment to reducing environmental impact. It offers cutting-edge logistics, connecting shippers with transporters, and manages transactions across various marketplaces. Additionally, Flexofast functions as a digital marketing and social commerce agency, specializing in content strategy and short-form video production. |
|||||
| Ransomware | Del Campo Supreme id22218 View details | United States | Communication / Marketing | ||
|
delcampo-com-mx.dynalias.com , https://www.zoominfo.com/c/del-campo-supreme-inc/17516142 On-site daycare, schooling and health programs are just a few of the things Del Campo provides for their employees |
|||||
| Ransomware | Cremona Inoxidable id22217 View details | Argentina | Communication / Marketing | ||
|
www.creminox.com , https://www.zoominfo.com/c/cremona-inoxidable-sa/359162083 Cremona Inoxidable S.A. specializes in manufacturing equipment and systems for the food industry, particularly focusing on products for the processing lines of meat and sausages. Their offerings include multiple molding systems, automatic cooking and cooling systems, and demolding systems designed to enhance productivity and ensure employee safety. The company follows a thorough consulting and engineering process to develop tailored solutions that meet strict sanitary standards while utilizing the latest technology in production. Additionally, they provide installation, training, and after-sales services to ensure optimal operation of their equipment. |
|||||
| Ransomware | Grupo Halcon id22216 View details | Mexico | Other | ||
|
www.halconceramicas.com , https://www.zoominfo.com/c/grupo-halcon/378396328 Grupo Halcon | Cerámicas - Con más de 50 años de experiencia, Grupo Halcón Cerámicas es hoy una compañÃa de referencia en el mercado de la cerámica nacional e internacional |
|||||
| Ransomware | JIEI (Thailand) Co., Ltd id22215 View details | Thailand | Communication / Marketing | ||
|
https://jieithai.com JIEI (Thailand) Co., Ltd. was founded in November 2011 as a member company of the Kasei Kogyo Co., Ltd. group. Active in business since 1966, the Kasei Kogyo group, with a core focus on rubber extrusion for automobile use, has arrived at the present together with the development of the world's automotive industry. Through a variety of processes, from planning and development in industrial methods to production, we place a priority on responding to global demands and are involved in precision and quality product manufacturing using advanced technology that can respond to the needs of many types of customers, all from our bases in not only Japan but also North America, China, and Asia. |
|||||
| Ransomware | Wharton Independent id22214 View details | United States | Education | ||
|
www.whartonisd.net , www.zoominfo.com/c/wharton-independent-school-district/213188688 Wharton Independent School District provides educational services to a diverse student population, aiming to prepare every student for success in a global society. The district offers a wide range of programs including athletics, special education, and vocational training. Targeting students from elementary through high school. Wharton ISD also emphasizes parental and community engagement in the educational process. Additionally, it provides resources and support for both students and staff across its various departments |
|||||
| Ransomware | Kuwait Portland Cement id22213 View details | Kuwait | Construction / Real Estate | ||
|
www.portlandkw.co , https://www.zoominfo.com/c/kuwait-portland-cement-co/372134369 Stock Symbol = PCEM Kuwait Portland Cement Company specializes in the trading, importing, and exporting of various types of bulk cement and its packaging. The company is involved in establishing and managing warehouses and silos to supply and distribute different kinds of cement, as well as providing necessary transportation services. Additionally, it trades in construction materials and invests financial surpluses in managed portfolios. Its intended clients include businesses and organizations in the construction sector. |
|||||
| Ransomware | Amv International Development id22212 View details | United States | Construction / Real Estate | ||
|
www.amvsa.com , https://www.zoominfo.com/c/amv-international-development-sa/452552625 , Amv International Development SA is a company that operates in the Civil Engineering Construction industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Bucaramanga, Santander, Colombia |
|||||
| Ransomware | Liceo Francés Antoine y Consuelo de Saint-Exupéry id22211 View details | Chile | Communication / Marketing | ||
|
www.lfelsalvador.org , https://www.zoominfo.com/c/liceo-frances-antoine-y-consuelo-de-saint-exupery/430335895 El Liceo Francés de San Salvador Antoine et Consuelo de Saint-Exupéry es un establecimiento escolar francés en El Salvador que forma parte de la red de la Agencia para la Enseñanza Francesa al Extranjero. Desde kínder hasta último año de bachillerato, el Liceo sigue los programas escolares impuestos por el Ministerio de la Educación Nacional francés. Además de los diplomas salvadoreños, los alumnos pasan también los diplomas francéses de noveno grado (brevet de collège) y de bachillerato (baccalauréat). |
|||||
| Ransomware | Dolidol id22210 View details | Morocco | Retail / E-commerce | ||
|
www.dolidol.ma , https://www.zoominfo.com/c/dolidol/426056693 Established in 1972, Dolidol is one of the oldest mattress manufacturers in Morocco and a leading player in thghout Morocco, perceived as being higher-end with better quality products. Dolidol manufactures and sells polyurethane foam, mattresses and sofas, as well as non-woven textile. Dolidol has developed a wide distribution network in Morocco with 46 owned stores, 10 distribution facilities and over 1,100 distributors. |
|||||
| Ransomware | AB Mauri Private id22209 View details | India | Communication / Marketing | ||
|
www.abmauri.in https://www.zoominfo.com/c/a-b-mauri-india-private-ltd/1131488896 A B Mauri India Private Ltd is a company that operates in the Food & Beverage industry. It employs 100to249 people and has 25Mto50M of revenue. The company is headquartered in Ernakulam North, Kerala, India. Daughter company of 2.5 bln company www.abmauri.com www.zoominfo.com/c/ab-mauri-uk-ltd/235657 AB MAURI, a division of Associated British Foods (ABF), is a producer and distributor of yeast and bakery ingredients. It is headquartered in Peterborough in the United Kingdom with additional offices throughout the world. |
|||||
| Ransomware | InjectSense id22208 View details | United States | Healthcare / Pharma | ||
|
https://www.zoominfo.com/c/injectsense-inc/406591024 https://www.injectsense.com/ Injectsense specializes in ultra-miniature implantable sensors designed for digital health applications. Their self-anchoring platforms continuously measure health parameters such as absolute pressure and oxygenation, providing doctors with vital 24/7 health insights. The company combines expertise in semiconductor and medical systems, ensuring their devices are supply chain-ready and utilize advanced miniaturization technology. Their target clients include physicians seeking to improve patient care through autonomous sensing and actionable data. |
|||||
| Ransomware | Algorithmica Research id22207 View details | Sweden | Finance / Legal / Insurance | ||
|
www.algorithmica.se https://www.zoominfo.com/c/algorithmica-research/1179714 Algorithmica Research is founded in 1994 with the mission of creating innovative software for quantitative financial analysis and haven’t looked back since. Well established in northern Europe, Algorithmica has an extensive client list including top tier financial institutions. They are partner owned and has been profitable since inception, enjoying a “Triple A” credit rating from Dun & Bradstreet. Algorithmica successfully combines leading edge competence in quantitative finance and software development. They are committed to academic work on all levels, and actively sponsor research, student activities and courses in quantitative finance. |
|||||
| Ransomware | Sigma id22206 View details | France | IT | ||
|
Sigma Informatique, also known as Groupe Sigma, is a mission-driven IT and digital services company headquartered in La Chapelle-sur-Erdre, France, with over 50 years of experience in the sector. The firm specializes in software publishing, integration of tailor-made digital solutions, and outsourced technology services, supporting clients through their digital transition with 700 employees across five agencies. As a 100% French enterprise, Sigma provides comprehensive IT support and innovation services to businesses seeking impactful digital transformation. The company was listed as a ransomware victim associated with the threat actor thegentlemen. |
|||||
| Ransomware | Takedown request #1798 id24734 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | PC Chandra Jewellers id22205 View details | India | Communication / Marketing | ||
|
www.pcchandraindia.com https://www.zoominfo.com/c/pc-chandra-jewellers/357942698 Started in 1939 with its first showroom in Bowbazaar, North Kolkata by the Late Shri Purna Chandra Chandra, now, it has its presence all over India and also abroad. A wedding in West Bengal is incomplete without the artistic designs and fine craftsmanship of P C Chandra Jewellers. Over these decades, it has 44 showrooms, 12 showrooms in Kolkata city(under KMC), has spread its wings across 25 towns in West Bengal and 7 cities in India - Agartala, Bhubaneswar, Delhi, Noida, Bangalore, Jamshedpur and Mumbai. Crossing over geographical boundaries, the PC Chandra Jewellers also has an e-commerce site for buying online. Though steeped in tradition, P C Chandra Jewellers has brought in modernity in its approach to cater to the today's women. Its cutting edge communication and domination of the media scene has made P C Chandra Jewellers the biggest jewellery house in Eastern India. |
|||||
| Ransomware | Shifa Oman id22204 View details | Oman | Healthcare / Pharma | ||
|
https://www.shifahospital.om Shifa Hospital is a multispecialty private facility in the heart of Muscat and a fully-fledged medical service provider. Our state-of-the-art infrastructure is built to the highest standards possible with dedication and careful health planning that meets international standards. Our purpose-built facility is designed and operated by Omani pioneers and is dedicated to serving our country’s population and supporting their healthcare needs. |
|||||
| Ransomware | Oriental de Seguros id22203 View details | Panama | Communication / Marketing | ||
|
www.laoriental.com https://www.zoominfo.com/c/oriental-de-seguros/460263239 Oriental de Seguros offers a wide range of insurance products including health, life, personal accident, automobile, and property insurance, catering to both individuals and businesses. Their services also encompass bonds and various support options for policyholders. The company is committed to facilitating processes for their intermediaries and clients through mobile applications and enhanced payment methods. With a strong backing from international standards, Oriental de Seguros aims to provide trustworthy and comprehensive insurance solutions. |
|||||
| Ransomware | Venezuela Re id22202 View details | Venezuela, Bolivarian Republic of | Finance / Legal / Insurance | ||
|
www.venezuelare.com www.bancoactivo.com C.A. Reaseguradora Internacional de Venezuela (Venezuela Re) is a reinsurance company with over 50 years of experience in the insurance sector. The company focuses on providing professional services and support through its highly skilled technical, commercial, financial, technological, and legal teams. Venezuela Re aims to contribute to the economic and social progress of the country while being committed to risk management and regulatory compliance. Its mission is to achieve stability, solidity, and transparency in the insurance sector, aspiring to be the leading reinsurer in Venezuela with international participation . Una institución bancaria que se mueve a la misma velocidad del trabajo diario de sus clientes, dándoles soluciones financieras ágiles y competitivas, con menos trámites y una atención personalizada. Banco Activo |
|||||
| Ransomware | J.V.D.B. & Associates Inc id22201 View details | United States | Finance / Legal / Insurance | ||
|
[J. V. D. B. & Associates, Inc. is an Illinois collection agency. Illinois collection agencies can help businesses, medical practices and facilities that are creditors to collect their accounts receivable. Debt collection help might include; collection demand letters, debt collector phone calls, credit reporting to credit bureaus and legal proceedings including lawsuits. |
|||||
| Ransomware | Laboratorio Clinico Santa Rita id22200 View details | Costa Rica | Healthcare / Pharma | ||
|
Santa Rita Laboratorios offers a wide range of medical laboratory services, including hematology, immunology, microbiology, and molecular biology. The company is committed to preserving health through accurate diagnostics and operates with state-of-the-art technology and high-resolution equipment. They provide personalized medical assistance 24/7, as well as home sample collection services for client convenience. Intended clients include individuals seeking reliable laboratory tests and diagnostics. |
|||||
| Ransomware | Narumi (Thailand) Co.,Ltd. id22199 View details | Thailand | Manufacturing / Engineering | ||
|
NARUMI (THAILAND) CO., LTD. is a subsidiary of Narumi Goukin Manufacturing Co., Ltd. of Japan, established in June 2010 and located in the WHA Eastern Seaboard Industrial Estate, Rayong, Thailand. The company specializes in the manufacturing of plastic automotive components such as door handles, tailgate handles, and roof rails, primarily supplying major automotive manufacturers including Mitsubishi Motors (Thailand), Honda Automobile (Thailand), and Hitachi Chemical Automotive Products (Thailand). With approximately 130 employees, NARUMI (THAILAND) holds ISO/TS 16949 and ISO 14001 certifications, ensuring high standards in both quality management and environmental responsibility. In 2022, the company reported revenues of 622 million THB and a net profit of 41.6 million THB. |
|||||
| Ransomware | Ophtazon id22198 View details | France | Healthcare / Pharma | ||
|
https://www.zoominfo.com/c/ophtazon/457685589 https://www.ophtazon.com OPHTAZON, the first medical equipment platform dedicated to ophthalmology, links doctors or clinics wishing to sell their equipment with potential buyers whatever the equipment put up for sale or the geographical situation of the sellers and Buyers. Many people on Earth suffer from eye problems, not because of ignorance but just because of the lack of materials available to doctors to diagnose or treat them. Our goal is to help doctors get the equipment they need to provide the best possible eye care regardless of their location. By creating OPHTAZON, our idea is to enhance the equipment of doctors who are no longer used to benefit the doctors who really need them. |
|||||
| Ransomware | Surtel Technologies Pvt id22197 View details | India | Services | ||
|
https://www.zoominfo.com/c/surtel-technologies-pvt-ltd/357590007 www.surteltechnologies.com Surtel is a global management, information technology consulting service, and outsourcing organization. Our approach is to use our deep expertise in enterprise, extend enterprise solutions and outsourcing to help our clients create value for their customers and stakeholders. We use our industry and business-process knowledge, coupled with our awareness and understanding of emerging technologies, and new business and technology trends to design and implement solutions for our clients. We strive to help our clients improve their operational performance, deliver their products and services more effectively and efficiently, and grow their businesses in existing and new markets. We consider each of our clients unique, strive to design solutions exclusive to their business needs, and intend to help our clients move forward in every part of their businesses, from strategic planning to day-to-day operations. |
|||||
| Ransomware | Saelen/Heizomat id22196 View details | France | Communication / Marketing | ||
|
www.saelen.fr www.saelen-energie.fr https://www.zoominfo.com/c/saelen/457994561 https://www.zoominfo.com/c/heizomat-france---saelen-energie/476105707 Découvrez les broyeurs de branches et de végétaux Saelen. Demandez une démonstration et découvrez les broyeurs Eliet, les tondeuses Walker et Wessex, les rogneuses de souches Rayco, le matériel Redexim et les épandeurs à sel et sable Snowex. Saelen, votre fournisseur expert en machines d'entretien des espaces verts. HEIZOMAT FRANCE, fournisseur de solutions d'énergies renouvelables, propose des équipements répondant à tous les besoins de la filière Biomasse Energie de A à Z : - broyeurs des plaquettes de bois de 30 à 80 cm de diamètre HEIZOHACK - chaudières à bois déchiqueté entièrement automatisés HEIZOMAT. - filtre céramique ZERO particules fines Entreprise en forte croissance, engagée pour la transition énergétique, dans le domaine de la biomasse énergie, propose et intègre des équipements répondant à tous les besoins de la filière biomasse énergie de A à Z. |
|||||
| Ransomware | LOCATION PEINTURES PRESTATIONS (LPP) id22195 View details | France | Communication / Marketing | ||
|
Créée en 1991, la société LOCATION PEINTURES PRESTATIONS (LPP) est une société française dont le siège social est situé en Ile-de-France, au cœur de l'Essonne. Initialement spécialisée dans la peinture anti-corrosion et autres prestations, LPP s'est professionnalisée dans la conception, la fabrication et la distribution de matériels de sécurité puis de coffrages pour le bâtiment (locations, ventes, prestations de remise en état). LPP dispose d'un parc matériel de 52.000 m², de moyens de manutention et de soudure, d'un atelier pour le traitement de surface, ainsi que des ateliers pour l'entretien de matériels pour le BTP (grenaillage / peinture). Forte de 30 années d'expérience et de collaboration avec les plus grands groupes du BTP, LPP à su s'adapter aux nouvelles contraintes de production et de sécurité pour concevoir des produits plus performants, plus ergonomiques et plus respectueux de l'environnement. |
|||||