Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 716 published victims and 1 known leak locations in a single intelligence view.

Victims 716 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-07-17 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 120 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 716 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (716)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 101–200 of 716.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Ce Ratp Comite D entreprise Ratp id30335 View details France Other
    Ransomware Keifert id30336 View details Germany Manufacturing / Engineering
    Ransomware Keifert id30336 View details Germany Manufacturing / Engineering
    Ransomware Kosmos id30337 View details Germany IT
    Ransomware Kosmos id30337 View details Germany IT
    Ransomware EBNY Development id30338 View details Egypt Retail / E-commerce
    Ransomware EBNY Development id30338 View details Egypt Retail / E-commerce
    Ransomware Tonnies Group id30339 View details Germany Agriculture / Food
    Ransomware Tonnies Group id30339 View details Germany Agriculture / Food
    Ransomware Automovil Supply S.A id30340 View details Paraguay Retail / E-commerce
    Ransomware Automovil Supply S.A id30340 View details Paraguay Retail / E-commerce
    Ransomware Excel Cell Electronic id30341 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Excel Cell Electronic id30341 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Mercado Libre id30342 View details Argentina Retail / E-commerce
    Ransomware Mercado Libre id30342 View details Argentina Retail / E-commerce
    Ransomware CSIR Structural Engineering Research Centre id30343 View details India Research
    Ransomware CSIR Structural Engineering Research Centre id30343 View details India Research
    Ransomware Jump Solutions Inc id30344 View details Philippines IT
    Ransomware Jump Solutions Inc id30344 View details Philippines IT
    Ransomware MBT Energy id30345 View details Germany Energy
    Ransomware MBT Energy id30345 View details Germany Energy
    Ransomware Pro-Tech Technology id30347 View details Singapore Energy
    Ransomware Pro-Tech Technology id30347 View details Singapore Energy
    Ransomware Pro-Tech Technology id30347 View details Hong Kong Energy
    Ransomware Technical Solutions Group id30348 View details United States IT
    Ransomware Technical Solutions Group id30348 View details United States IT
    Ransomware Keywest Projects id30178 View details Canada Construction / Real Estate
    Ransomware Keywest Projects id30178 View details Canada Construction / Real Estate
    Ransomware International Freight Services id30179 View details United States IT
    Ransomware International Freight Services id30179 View details United States IT
    Ransomware Royal Thai Navy Housing Cooperative id30180 View details Thailand Other
    Ransomware Royal Thai Navy Housing Cooperative id30180 View details Thailand Other
    Ransomware CTM India Limited motherson INDIA id30181 View details India Finance / Legal / Insurance
    Ransomware CTM India Limited motherson INDIA id30181 View details India Finance / Legal / Insurance
    Ransomware Hooke Laboratories id30182 View details United States IT
    Ransomware Hooke Laboratories id30182 View details United States IT
    Ransomware GIA Partners id30183 View details United States IT
    Ransomware GIA Partners id30183 View details United States IT
    Ransomware Rowley Properties id30184 View details United Kingdom Construction / Real Estate
    Ransomware Rowley Properties id30184 View details United Kingdom Construction / Real Estate
    Ransomware Canada Wide Media id30185 View details Canada Finance / Legal / Insurance
    Ransomware Canada Wide Media id30185 View details Canada Finance / Legal / Insurance
    Ransomware ErgoMed id30186 View details United Kingdom Healthcare / Pharma
    Ransomware ErgoMed id30186 View details United Kingdom Healthcare / Pharma
    Ransomware MBO GmbH id30187 View details Germany Manufacturing / Engineering
    Ransomware MBO GmbH id30187 View details Germany Manufacturing / Engineering
    Ransomware Meccanica Gn id30188 View details Italy Manufacturing / Engineering
    Ransomware Meccanica Gn id30188 View details Italy Manufacturing / Engineering
    Ransomware Al Dhow Group id30189 View details United Arab Emirates Transportation / Travel / Logistics
    Ransomware Al Dhow Group id30189 View details United Arab Emirates Transportation / Travel / Logistics
    Ransomware Beran Concrete id30190 View details Czechia Construction / Real Estate
    Ransomware Beran Concrete id30190 View details Czechia Construction / Real Estate
    Ransomware BDS CZ id30191 View details Czechia Finance / Legal / Insurance
    Ransomware BDS CZ id30191 View details Czechia Finance / Legal / Insurance
    Ransomware Stadttheater Giessen id30192 View details Germany Hospitality / Food & Beverage / Tourism
    Ransomware Stadttheater Giessen id30192 View details Germany Hospitality / Food & Beverage / Tourism
    Ransomware Gegenbauer Elektrotechnik id30193 View details Austria IT
    Ransomware Gegenbauer Elektrotechnik id30193 View details Austria IT
    Ransomware Bell Hardware id30194 View details United States Retail / E-commerce
    Ransomware Bell Hardware id30194 View details United States Retail / E-commerce
    Ransomware CHIFENG GOLD SEPON id30195 View details Lao People's Democratic Republic IT
    Ransomware CHIFENG GOLD SEPON id30195 View details Lao People's Democratic Republic IT
    Ransomware Natren id30196 View details United States Healthcare / Pharma
    Ransomware Natren id30196 View details United States Healthcare / Pharma
    Ransomware Au Vieux Campeur id30197 View details France Retail / E-commerce
    Ransomware Au Vieux Campeur id30197 View details France Retail / E-commerce
    Ransomware Ayres Carr & Sullivan, P.C. id30198 View details United States IT
    Ransomware Ayres Carr & Sullivan, P.C. id30198 View details United States IT
    Ransomware Immling id30199 View details Germany Retail / E-commerce
    Ransomware Immling id30199 View details Germany Retail / E-commerce
    Ransomware DHC Corporation id30200 View details Japan Retail / E-commerce
    Ransomware DHC Corporation id30200 View details Japan Retail / E-commerce
    Ransomware Steegaa Interior id30201 View details United Arab Emirates Other
    Ransomware Steegaa Interior id30201 View details United Arab Emirates Other
    Ransomware Indra Group id30202 View details Spain IT
    Ransomware Indra Group id30202 View details Spain IT
    Ransomware Climax Technology id30203 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Climax Technology id30203 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Centre Ophtalmologique dErmont id30204 View details France Healthcare / Medicine
    Ransomware Centre Ophtalmologique dErmont id30204 View details France Healthcare / Medicine
    Ransomware Comp Trading Co id30205 View details Thailand
    Ransomware Mondottica id30206 View details Italy
    Ransomware OSP HOLDING FRANCE id30207 View details France
    Ransomware NATURGHIACCIO id30208 View details Italy
    Ransomware MakoLab id30209 View details Poland
    Ransomware EMAS Group id30210 View details Czechia
    Ransomware The City of Boyne City id30211 View details United States
    Ransomware Oron Law Firm id30212 View details Switzerland
    Ransomware Oron Law Firm id30212 View details Switzerland
    Ransomware Wacha Justen id30213 View details Nicaragua
    Ransomware CUI Agency id30214 View details United States
    Ransomware Melcor Developments Ltd id30215 View details Canada
    Ransomware FAC Logistique id30216 View details France
    Ransomware SDEZ id30217 View details France
    Ransomware Pou Sheng International id30218 View details Taiwan, Province of China
    Ransomware Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik id30055 View details Germany IT
    Ransomware Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik id30055 View details Germany IT
    Ransomware hiddenn id30042 View details
    Ransomware Vera Chimie Management id30043 View details France
    Ransomware Alexander Buch Bilanzbuchhalter id30044 View details Germany