Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 1040 published victims and 2 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Thegentlemen is tracked by Breach House as a ransomware group with 1040 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 2 | Onion service | Down checked 3h ago | i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion |
| Leak location 1 | Onion service | Down checked 3h ago | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
Top Activity Sectors (20)
- IT 110
- Manufacturing / Engineering 103
- Communication / Marketing 88
- Healthcare / Pharma 66
- Finance / Legal / Insurance 50
- Retail / E-commerce 49
- Construction / Real Estate 48
- Services 38
- Transportation / Travel / Logistics 27
- Not identified 27
- Agriculture / Food 23
- Education 21
- Public Sector 20
- Energy 18
- NGOs / Associations 12
- Hospitality / Food & Beverage / Tourism 12
- Telecommunications 6
- Media / Entertainment 1
- Law Enforcement / Public Sector 1
- Research 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Thegentlemen, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: thegentlemen executes PowerShell scripts to run payload logic, disable defenses, and propagate across systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: thegentlemen modifies registry run keys and startup locations to maintain persistence after reboots.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: thegentlemen disables or modifies security tools such as EDR and AV processes to hinder incident response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: thegentlemen deletes Volume Shadow Copies and backup artifacts via system commands to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1003.001 LSASS Memory Credential Access
What they do: thegentlemen accesses LSASS memory to steal credentials for lateral movement and privilege escalation.
What that means: Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
-
T1135 Network Share Discovery Discovery
What they do: thegentlemen uses network share discovery to locate victim file shares and map accessible storage paths for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: thegentlemen uses SMB/Windows Admin Shares for lateral movement between networked hosts in manufacturing and IT environments.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: thegentlemen encrypts victim files and data stores using ransomware payloads to maximize impact and extortion pressure.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: thegentlemen calls system recovery inhibitors to block restore processes and harden ransomware impact.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
-
T1491.001 Internal Defacement Impact
What they do: thegentlemen performs internal defacement by replacing victim files with ransom notes and altered content.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (40)
▼Software Thegentlemen has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
DumpBrowserSecrets
KslKatz
Mimikatz
Defense evasion
EDRStartupHinder
KslDump
PowerRun
RedSun
ThrottleStop driver (BYOVD)
Discovery & enumeration
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
Nmap
MANSPIDER
PrivHound
RelayKing-Depth
Shodan
TaskHound
Exfiltration
RClone
WinSCP
LOLBAS (living-off-the-land binaries)
PsExec
Networking & tunnelling
Amnezia VPN
Chisel
Cloudflared
OpenVPN
Proxychains
PuTTY
Wireguard VPN
Offensive security tooling
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
Remote monitoring & management
AnyDesk
FreeRDP
MeshAgent
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-GENTLEMEN_3.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 13343E50C1B3466F0EA35B5B3E55A044CB7132FD28A8665EFEA0E5848E276D548C21B79F15C2 Download Tox messenger: https://tox.chat/download.html Contact us (add via SimpleX): https://smp14.simplex.im/a#4mlOiePV8NBXOv2QrZ9CaPeRPm1mBUgxn4SdpFnm978 Download SimpleX https://simplex.chat/downloads/ СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/TheGentlemen26 Clearnet blog link: https://thegentlemen.cc/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats. We have stolen more than 100 GB of your corporate information from your servers, including critically important data. Your company is facing a massive information security breach. A total data leak has occurred. This greatly increases the risk of colossal financial and reputational losses.
README-GENTLEMEN_2.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 98C132E2B20B531BE6604397D97040C1E9EB42FCE12EDF119BCE8B4031CA5C70DAF5E65FA3C3 Download Tox messenger: https://tox.chat/download.html Contact us (add via Session ID): 05809b2da1d5b1a302f48b5767fd1843d54f3c516f9ab0eb26b544ffa73340292e Download Session https://getsession.org СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats.
README-GENTLEMEN.txt
[snip] = YOUR ID Gentlemen, your network is under our full control. All your files are now encrypted and inaccessible. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E Download Tox messenger: https://tox.chat/download.html COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1040)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 101–200 of 1040.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | EKEPIS id31689 View details | Greece | — | — | |
|
ekepis.gr rocketreach.co/ekepis-ethniko-kentro-pistopoiisis-domon-profile_b6d46b6ac7408ffe EKEPIS was Greece's National Centre for the Accreditation of Continuing Vocational Training, responsible for certifying adult educators and lifelong learning providers. The organization no longer exists, as its accreditation and certification duties were absorbed by EOPPEP (ΕΟΠΠΕΠ), the National Organisation for the Certification of Qualifications and Vocational Guidance. Today, anyone looking for their services must go through EOPPEP or the official Greek government portal, since the old ekepis.gr domain is no longer an official resource. |
|||||
| Ransomware | Megalaser Industria Metalurgica LTDA id31690 View details | Brazil | — | — | |
|
megalaser.com.br zoominfo.com/c/megalaser-industria-metalúrgica-ltda/1315472404 Megalaser is a Brazilian metallurgical company based in São Paulo, specializing in advanced metalworking services like laser cutting, CNC bending, and robotic welding. Founded in 2006, the manufacturer provides high-quality machined components and assemblies for diverse industries, including renewable energy, mining, automotive, and oil and gas. Their platform highlights a strong commitment to precision engineering, integrated manufacturing solutions, and sustainable industrial practices. |
|||||
| Ransomware | Community Connections id31691 View details | United States | — | — | |
|
comconnections.org zoominfo.com/c/community-connections-inc/350834294 Community Connections is a non-profit organization based in Ketchikan, Alaska, dedicated to providing individualized support for children, seniors, and individuals with disabilities. Founded over 40 years ago, their core mission focuses on encouraging independence, community belonging, and improving the overall quality of life for those they serve. The organization offers a wide range of specialized programs, including early childhood learning, mental health support, and comprehensive disability services. |
|||||
| Ransomware | Acli id31692 View details | Italy | — | — | |
|
acli.it zoominfo.com/c/acli/372618594 ACLI (Christian Associations of Italian Workers) is a major Italian Catholic social promotion organization founded in 1944 to advocate for labor rights and human dignity. Operating a vast network of local clubs, the association provides essential community services, including tax assistance, employment support, and vocational training. Today, it continues to champion social solidarity, democratic participation, and active citizenship across Italy and internationally. |
|||||
| Ransomware | Vector Two Technology id31693 View details | Brazil | IT | — | |
|
vtt.com.br zoominfo.com/c/vtt/372441609 VTT is a pioneering Brazilian technology company founded in 1996 that specializes in Digital Signage and Retail Media solutions. As a leading provider in Latin America, the company delivers innovative digital displays, menu boards, and interactive customer experience tools for the retail sector. Their platform also supports a robust channel partner program, helping businesses across the region modernize their visual communication and in-store marketing strategies. |
|||||
| Ransomware | Safeware id31658 View details | United States | IT | — | |
|
Safewareinc.com is an IT company based in the United States, offering various services within the IT sector. As a US-based entity, safewareinc.com operates in a highly competitive market, providing IT solutions to its clients. It was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Safeware id31658 View details | United States | IT | — | |
|
safewareinc.com Safeware Inc. is a national leader providing safety and security solutions for first responders, schools, and government agencies. For over 40 years, they have supplied advanced protective equipment and public preparedness training across the United States. The company simplifies government purchasing by offering specialized gear through competitive cooperative contract pricing. |
|||||
| Ransomware | PharmaEssentia id31506 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
PharmaEssentia is a Taiwan-based company operating in the healthcare and pharmaceutical sector, offering various products and services. The company is involved in the development and manufacturing of pharmaceuticals. PharmaEssentia was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | PharmaEssentia id31506 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
pharmaessentia.com zoominfo.com/c/pharmaessentia-corp/145441146 PharmaEssentia is a global biopharmaceutical innovator founded in 2003 and headquartered in Taiwan. It specializes in developing best-in-class therapies and biologics for blood disorders, hematologic cancers, and other serious diseases. The company is fully integrated and operates internationally with a strong commercial and clinical presence in the U.S., Europe, and Japan. |
|||||
| Ransomware | CONTAC Ingenieros id31507 View details | Chile | IT | — | |
|
contac.cl is an IT company based in Chile, providing various IT services. As an entity in the IT sector, contac.cl operates in the technology industry, catering to clients in Chile. contac.cl was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | CONTAC Ingenieros id31507 View details | Chile | IT | — | |
|
contac.cl zoominfo.com/c/contac-ingenieros-division-sistemas/372522727 Contac is a technology company based in Santiago, Chile, specializing in operations and asset management technologies. They provide comprehensive automation services and real-time information systems to help industrial clients maximize their operational performance. The company focuses on delivering custom solutions to optimize asset management, reduce costs, and improve overall system reliability. |
|||||
| Ransomware | RAK Construction id31508 View details | India | Construction / Real Estate | — | |
|
Rak Construction is a construction and real estate company based in India, offering various services in the sector. The company operates in the Indian market, providing construction and real estate solutions. Rakconstruction.in was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | RAK Construction id31508 View details | India | Construction / Real Estate | — | |
|
rakconstruction.in zoominfo.com/c/rak-construction/1266108608 RAK Construction is a premier construction company based in Bangalore, India, with over 20 years of industry experience. They specialize in delivering high-quality residential and commercial building projects as a leading civil contractor. The company employs a dedicated team of professionals focused on providing reliable construction and contracting services. |
|||||
| Ransomware | Lancesoft India id31509 View details | India | IT | — | |
|
Lancesoft.in is an Indian IT company, operating in the information technology sector. The company is based in India and provides various IT services. Lancesoft.in was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Lancesoft India id31509 View details | India | IT | — | |
|
lancesoft.in zoominfo.com/c/lancesoft-india/547301190 LanceSoft India is a key division of a global workforce solutions and IT services company founded in 2000. Based in Bengaluru, it employs thousands of professionals to deliver comprehensive staffing solutions, including temporary and permanent placements. The company connects businesses worldwide with top-tier talent across diverse industries such as IT, engineering, and healthcare. |
|||||
| Ransomware | AIMS Group id31510 View details | United Kingdom | IT | — | |
|
Aimsgroup.com is an IT company based in the United Kingdom, providing various IT services. The company operates in the IT sector, offering services to clients in GB. Aimsgroup.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | AIMS Group id31510 View details | United Kingdom | IT | — | |
|
aimsgroup.com AIMS Group LLC is a major conglomerate based in Ajman, UAE, established in 2003 with a workforce of thousands. It operates primarily in the environmental services and construction sectors, specializing in infrastructure and road development. The company provides comprehensive industrial solutions, including asphalt production, building materials supply, and fleet management |
|||||
| Ransomware | AnMed id31511 View details | United States | Healthcare / Pharma | — | |
|
AnMed Health is a healthcare organization based in the United States, providing medical services to patients. The organization operates in the healthcare sector, offering various medical treatments and care. AnMed Health was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | AnMed id31511 View details | United States | Healthcare / Pharma | — | |
|
anmed.org zoominfo.com/c/anmed/1238269198 AnMed is an independent, not-for-profit health system founded in 1908, serving Upstate South Carolina and northeast Georgia. Its anchor facility, AnMed Medical Center, is a 461-bed acute care hospital located in Anderson, South Carolina. The network provides comprehensive medical services, including emergency care, cardiovascular surgery, advanced imaging, and specialized outpatient clinics. |
|||||
| Ransomware | NTU Alumni Club id31512 View details | Singapore | NGOs / Associations | — | |
|
ntualumni.org.sg is a website of the Nanyang Technological University Alumni Association in Singapore, providing services and resources to its members. As an association, it aims to foster a sense of community among its alumni. ntualumni.org.sg was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | NTU Alumni Club id31512 View details | Singapore | NGOs / Associations | — | |
|
ntualumni.org.sg zoominfo.com/c/ntu-alumni-club/447180090 The NTU Alumni Club is an independent association for graduates of Nanyang Technological University in Singapore. It serves as a dedicated platform for alumni to connect, network, and maintain a lifelong relationship with their alma mater. Members enjoy exclusive perks, career opportunities, and access to physical facilities like lounges and co-working spaces at their clubhouse. |
|||||
| Ransomware | Canopy Support Services id31513 View details | Canada | Healthcare / Pharma | — | |
|
canopysupport.ca is a Canadian entity operating in the healthcare and medicine sector, providing support services. Located in Canada, the company offers various services to healthcare providers. canopysupport.ca was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Canopy Support Services id31513 View details | Canada | Healthcare / Pharma | — | |
|
canopysupport.ca zoominfo.com/c/canopy-support-services/347650822 Canopy Support Services is a community-based organization in Peterborough, Ontario, dedicated to supporting individuals with intellectual and developmental disabilities. They provide a safe, welcoming environment for people, including those with Autism Spectrum Disorder, to learn new skills and achieve their personal goals. The organization empowers its clients to overcome everyday barriers, build self-confidence, and lead more independent lives |
|||||
| Ransomware | Mikel Coffee id31514 View details | Mexico | Retail / E-commerce | — | |
|
Mikelcoffee.com is an e-commerce company based in Mexico, operating in the retail sector. The company likely offers various products for sale online, catering to customers in Mexico and possibly other countries. Mikelcoffee.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Mikel Coffee id31514 View details | Mexico | Retail / E-commerce | — | |
|
mikelcoffee.com zoominfo.com/c/mikel-coffee/456172290 Mikel Coffee Company is a prominent Greek coffeehouse chain that began its journey in 2008 in the city of Larissa. It has rapidly expanded into a global brand, operating a network of over 410 coffee shops across 19 different countries. The company offers a comprehensive menu of premium coffee blends, beverages, snacks, and retail products, focusing on delivering a unique and welcoming coffee experience. |
|||||
| Ransomware | Mikel Coffee id31514 View details | Greece | Retail / E-commerce | — | |
|
mikelcoffee.com zoominfo.com/c/mikel-coffee/456172290 Mikel Coffee Company is a prominent Greek coffeehouse chain that began its journey in 2008 in the city of Larissa. It has rapidly expanded into a global brand, operating a network of over 410 coffee shops across 19 different countries. The company offers a comprehensive menu of premium coffee blends, beverages, snacks, and retail products, focusing on delivering a unique and welcoming coffee experience. |
|||||
| Ransomware | Hong Kong Baptist University id31515 View details | Hong Kong | Education | — | |
|
Hong Kong Baptist University, located in Hong Kong, is a public university that offers a range of academic programs. The university is part of the education sector in Hong Kong, providing various undergraduate and postgraduate degree programs. It was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Hong Kong Baptist University id31515 View details | Hong Kong | Education | — | |
|
hkbu.edu.hk zoominfo.com/c/hong-kong-baptist-university/429650952 Hong Kong Baptist University (HKBU) is a leading public research university established in 1956 in Hong Kong. It is highly regarded for its academic excellence, particularly in liberal arts, business, communication, and traditional Chinese medicine. As one of the region's eight statutory publicly funded universities, it is dedicated to fostering global citizenship and innovative research. |
|||||
| Ransomware | Eva Care id31516 View details | United Kingdom | Healthcare / Pharma | — | |
|
Evacare.com operates in the healthcare and pharmaceutical sector, providing services in the United Kingdom. As a healthcare entity, evacare.com is likely involved in medical care and pharmaceutical services. Evacare.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Eva Care id31516 View details | United Kingdom | Healthcare / Pharma | — | |
|
evacare.com rocketreach.co/eva-care-profile_b7a227f8c53b4785 Eva Care Group is a healthcare provider specializing in the post-acute care industry, headquartered in Los Angeles, California. With over 50 years of combined experience, the company operates and manages a network of nursing homes and rehabilitation facilities. They deliver comprehensive solutions encompassing clinical, financial, operational, and environmental management to ensure high-quality patient care. |
|||||
| Ransomware | Premier Pigs id31517 View details | United Kingdom | Agriculture / Food | — | |
|
Premierpigs.com operates in the agriculture and food sector in the United Kingdom, providing services related to pig farming. As a company in this sector, premierpigs.com is involved in activities such as pig breeding, farming, and possibly related food production. Premierpigs.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Premier Pigs id31517 View details | United Kingdom | Agriculture / Food | — | |
|
premierpigs.com zoominfo.com/c/premier-pigs/458500816 Grupo Premier Pigs is a family-owned agricultural company based in Spain, founded in 1992 and specializing in the swine farming industry. Operating as a major pig farming integrator, the business manages its own breeding and fattening farms alongside a dedicated feed production mill. The organization is committed to sustainable livestock practices and comprehensive agricultural management, which also includes cereal farming. |
|||||
| Ransomware | Zion Contracting id31518 View details | United States | Construction / Real Estate | — | |
|
Zion Contracting is a construction and real estate company based in the United States, offering various services within the sector. The company operates within the construction and real estate industry, providing services to clients in the US. Zion Contracting was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Zion Contracting id31518 View details | United States | Construction / Real Estate | — | |
|
zioncontracting.com Zion Contracting LLC is a trusted general contractor based in New York, specializing in complex infrastructure and transportation projects. As a certified MBE, DBE, and SBE firm, they partner with government agencies to help fulfill minority and diversity contracting goals. Their main focus is delivering essential public works projects that strengthen communities across the state |
|||||
| Ransomware | Hartfiel Automation id31464 View details | Germany | Other | — | |
|
Hartfiel.com is a company based in Germany, operating in the Other sector. The company provides various offerings, although specific details about its services are not readily available. Hartfiel.com was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Hartfiel Automation id31464 View details | Germany | Other | — | |
|
hartfiel.com zoominfo.com/c/hartfiel-automation-inc/27608695 Hartfiel Automation is an industrial automation company providing comprehensive manufacturing solutions like pneumatics, robotics, motion control, and hydraulics. For over 60 years, they have been a specialized high-tech provider supporting the American manufacturing sector. Headquartered in Minnesota, the company employs hundreds of professionals dedicated to engineering and optimizing production processes |
|||||
| Ransomware | DHC id31435 View details | Japan | — | — | |
|
dhc.co.jp zoominfo.com/c/dhc-corp/372590440 DHC Corporation is a prominent Japanese brand renowned for its high-quality cosmetics, dietary supplements, and health foods. Originally founded as a translation company, it achieved global success by focusing on pure, natural ingredients—most notably its signature olive oil skincare. Today, DHC is trusted worldwide for combining rigorous scientific research with effective, affordable wellness products. |
|||||
| Ransomware | INKA Group GmbH Co id31436 View details | Germany | — | — | |
|
INKA Group GmbH & Co. KG is a German real estate holding company headquartered in Munich, registered in the Munich Commercial Register under HRA 99442. It specializes in leasing and renting own or leased land, buildings, and apartments, as well as managing commercial real estate on a fee or contract basis. The company operates as a closed investment and management vehicle with no public website or brand. It should not be confused with the Turkish İnka Group holding or other similarly named companies. |
|||||
| Ransomware | Vitex Pharmaceuticals id31437 View details | — | — | ||
|
vitexpharma.com zoominfo.com/c/vitex-pharmaceuticals-pty-ltd/90505264 Vitex Pharmaceuticals is a leading Australian contract manufacturer specializing in vitamins, minerals, and nutritional complementary medicines. Founded in 1989, this wholly Australian-owned company operates one of the country's largest and most state-of-the-art pharmaceutical manufacturing facilities. Recently, the company significantly expanded its capacity by opening a massive $250 million facility in Western Sydney to supply both domestic and global markets |
|||||
| Ransomware | Mdj Management id31438 View details | — | — | ||
|
appliedbizinvest.com zoominfo.com/c/mdj-management-llc/410565499 Applied Business Investments, Inc. (operating alongside MDJ Management LLC) is a private US-based management and finance consulting firm registered in Florida. Founded in the late 2000s, the company focuses on business investments, corporate management strategies, and financial advisory services. It operates as a boutique entity providing specialized support and investment structuring for various commercial projects |
|||||
| Ransomware | Hst id31439 View details | United States | — | — | |
|
hstechnology.com zoominfo.com/c/hst/352516154 digital platform for Healthcare Solutions Team (HST), a US-based healthcare cost-containment company now operating as Claritev. The company specializes in value-driven health plans, reference-based pricing solutions, and patient advocacy to reduce medical expenses. Through its HST Care Connect portal, it helps employers and individuals seamlessly find quality healthcare providers and optimize their medical benefits |
|||||
| Ransomware | Groupe BPCE id31440 View details | Viet Nam | — | ||
|
bpce-vietnam.com zoominfo.com/c/groupe-bpce/457963650 BPCE International (formerly Natixis), the Ho Chi Minh City branch of France’s second-largest banking group, Groupe BPCE. Operating in Vietnam since 1988, it is one of the country's longest-established foreign bank branches, holding a full banking license. The institution specializes in corporate and investment banking, offering specialized finance, trade solutions, and transaction processing to businesses across the region. |
|||||
| Ransomware | Axson Teknik id31441 View details | Sweden | — | — | |
|
axson.se zoominfo.com/c/axson-teknik-ab/456419010 Axson Teknik AB is a Swedish industrial supplier based in Askim, specializing in high-quality manual and robotic welding and cutting equipment. Founded in 1984, the company provides comprehensive technical services, maintenance, and specialized training for various industrial applications. They represent leading global brands such as Fronius, Thermal Dynamics, and Orbitalum, serving as a reliable partner for the manufacturing sector |
|||||
| Ransomware | Ponti id31442 View details | Poland | — | — | |
|
ponti.pl Ponti is a specialized automotive company based in Gdańsk, Poland, focused on the direct import, sales, and professional servicing of American vehicles. Operating as a leading expert in the US car market, the company handles everything from modern everyday models to the restoration of classic muscle cars and vintage vehicles. They provide a comprehensive range of services, including sourcing, repairing post-accident imports, and dedicated mechanical maintenance for automotive enthusiasts |
|||||
| Ransomware | Godollo id31443 View details | Hungary | — | — | |
|
godolloi.hu zoominfo.com/c/gödöll/1295448671 Gödöllő Ingatlanközpont is a leading real estate agency based in Gödöllő, Hungary, specializing in property sales, rentals, and construction in Eastern Pest County. The company offers a vast portfolio of residential and commercial properties, including apartments, family houses, land plots, and industrial spaces across Gödöllő and its surrounding towns. Established as a trusted local expert, the agency provides comprehensive real estate brokerage services to help clients navigate the regional property market |
|||||
| Ransomware | Hoang Chiropractic Center id31444 View details | United States | — | — | |
|
hoangchiro.com zoominfo.com/c/hoang-chiropractic-center/357138190 Hoang Chiropractic Center is a specialized healthcare clinic located in Metairie, Louisiana, led by Dr. Kim Hoang. The practice focuses on non-surgical pain relief and holistic wellness, offering services like AccuSpina spinal decompression, chiropractic adjustments, and custom orthotics. They are dedicated to helping patients relieve back pain and restore the body's natural ability to heal itself through personalized care |
|||||
| Ransomware | aZaaS id31445 View details | United States | — | — | |
|
azaas.com zoominfo.com/c/azaas-pte-ltd/353475433 aZaaS is a dynamic, Singapore-based IT services company specializing in IT as a Service (ITaaS) and hybrid cloud architecture solutions. They build and operate mission-grade, secure digital services for government and enterprise clients, strictly aligned with local compliance standards like GCC and IM8. The company provides comprehensive solutions including Business Process Management (BPM), Data as a Service (DaaS), and enterprise mobility to help organizations optimize their IT infrastructure |
|||||
| Ransomware | aZaaS id31445 View details | Singapore | — | — | |
|
azaas.com zoominfo.com/c/azaas-pte-ltd/353475433 aZaaS is a dynamic, Singapore-based IT services company specializing in IT as a Service (ITaaS) and hybrid cloud architecture solutions. They build and operate mission-grade, secure digital services for government and enterprise clients, strictly aligned with local compliance standards like GCC and IM8. The company provides comprehensive solutions including Business Process Management (BPM), Data as a Service (DaaS), and enterprise mobility to help organizations optimize their IT infrastructure |
|||||
| Ransomware | HIWIN id31446 View details | Italy | — | — | |
|
hiwin.it zoominfo.com/c/hiwin-srl/446225948 HIWIN Italia is the Italian subsidiary of the global Taiwanese corporation HIWIN Technologies, a world leader in motion control and system technology. Founded in 2013 and based in the Milan area, the company specializes in manufacturing high-precision components such as ball screws, linear guideways, industrial robots, bearings, and drive systems. They serve a wide range of high-tech industries, including semiconductor, automation, and medical equipment sectors across Southern Europe. |
|||||
| Ransomware | National Furniture Outlet id31447 View details | United States | — | — | |
|
nationalfurnitureoutlet.com National Furniture Outlet is a family-owned retail store in Westwego, Louisiana, serving the Greater New Orleans area for over three decades. They specialize in selling affordable living room, bedroom, and dining room furniture, as well as mattresses and appliances at highly competitive, discounted prices. The business is well-known locally for its frequent overstock sales and flexible financing options to support the community |
|||||
| Ransomware | TESI id31448 View details | Italy | — | — | |
|
tesiimpianti.it TESI S.r.l. is an Italian industrial company founded in 1997 as a spin-off from the Falck Group, specializing in machinery for coil and sheet metal processing. The company handles the buying, selling, installation, and maintenance of complete production lines for the metallurgical sector. A core part of their business is the deep refurbishment and technological upgrading of used industrial equipment with modern electrical and hydraulic systems. |
|||||
| Ransomware | Intranet Gov Brasil id31449 View details | Brazil | — | — | |
|
English: intranet.gov.br "Intranet Gov Brasil" refers to the secure internal corporate network and digital portal infrastructure used by the Brazilian Federal Government (gov.br) for its civil servants and ministries. It provides restricted access to internal administrative systems, official communications, and digital public services that are hidden from the general public. The underlying IT infrastructure and cybersecurity of these portals are primarily developed and maintained by state-owned technology companies like Serpro and Dataprev. |
|||||
| Ransomware | Feraboli Zootech id31450 View details | Italy | — | — | |
|
feraboli.it Feraboli Zootech is a historic Italian company operating in the livestock sector since 1880, with a heritage spanning over six generations. Based in Sospiro (Cremona), it specializes in designing and building advanced cattle barns, metal structures, and tailor-made equipment for dairy and fattening farms. The company combines traditional craftsmanship with modern automation and animal welfare solutions for professional breeders. |
|||||
| Ransomware | Nobema id31451 View details | Germany | Media / Entertainment | — | |
|
nobema.com zoominfo.com/c/nobema-srl/371446900 Nobema S.r.l. is an Italian family-run manufacturing company based near Turin, specializing in plastic molding and integrated industrial services since 1986. They provide end-to-end solutions ranging from custom mold design and pre-series sampling to advanced gas injection technology and mass production. The company serves diverse sectors with high-quality plastic components, uniquely combining industrial parts with niche consumer products like drumsticks |
|||||
| Ransomware | Vemec id31452 View details | Argentina | — | — | |
|
vemecsrl.com zoominfo.com/c/vemec-srl/397907621 Vemec S.r.l. is a leading Italian manufacturing company founded in 1983, specializing in the design and production of mechanical components and assemblies for heavy machinery. Operating across multiple production facilities covering over 23,000 square meters in Northern Italy, the firm provides advanced metal machining, laser cutting, and structural fabrication services. With more than 40 years of experience, Vemec delivers high-precision engineering solutions to diverse industrial sectors, including mechanotextiles and heavy equipment manufacturing |
|||||
| Ransomware | LensAss Architecten id31453 View details | Belgium | — | — | |
|
lensass.be LensAss Architecten is a Belgian architecture studio based in Hasselt, founded in 1995 by Bart Lens. The firm centers its work on the relationship between space, light, and context, specializing in both renovation and new construction. Its portfolio spans private homes, galleries, and adaptive reuse of heritage buildings across Belgium. |
|||||
| Ransomware | Phase Technologies id31454 View details | United States | — | — | |
|
phasetechnologies.com zoominfo.com/c/phase-technologies-llc/92275872 Phase Technologies is a leading American manufacturer of advanced power electronics, specializing in digital phase converters, variable frequency drives (VFDs), and motor protection. Founded in 1999 and headquartered in Rapid City, South Dakota, the company engineers and assembles its products entirely in the USA. Their innovative solutions generate high-quality three-phase power from single-phase sources, maximizing energy efficiency and system reliability for industrial and agricultural applications |
|||||
| Ransomware | Holborn European Marketing id31455 View details | Cyprus | — | — | |
|
holborn.com.cy zoominfo.com/c/holborn-european-marketing-company-ltd/462273998 Holborn European Marketing Company Limited is a Cyprus-based energy trading firm established in 1987, operating from its headquarters in Larnaca. The company specializes in purchasing crude oil and feedstocks, selling refined petroleum products, and active oil trading. It serves as a major energy supplier that fulfills local market needs in Cyprus while also maintaining a significant operational presence as a key oil products supplier in Northern Germany. |
|||||
| Ransomware | ZS Salovnova id31456 View details | Czechia | — | — | |
|
zssalounova.cz ZŠ Šalounova is a primary school located in the Vítkovice district of Ostrava, Czech Republic, operating across two buildings on Šalounova and Halasova streets. The institution provides comprehensive standard education alongside specialized programs, a wide range of extracurricular clubs, and a full school counseling facility. It actively supports student success through dedicated staff, including school psychologists, special educators, and career counselors, as well as various educational and sports projects. |
|||||
| Ransomware | Halliday Watkins Mann id31457 View details | United States | — | — | |
|
hwmlawfirm.com zoominfo.com/c/halliday--watkins--mann-pc/42929145 Halliday, Watkins & Mann, P.C. (HWM) is a Salt Lake City-based law firm founded in 1935, now operating as a fourth-generation family practice. The firm exclusively serves the mortgage banking industry, specializing in creditor remedies such as foreclosures, bankruptcies, replevins, evictions, and REO closings. With a team of 51–200 employees, HWM provides full-service legal support and title curative work to financial institutions across multiple states |
|||||
| Ransomware | YY Business Solutions id31458 View details | IT | |||
|
Y&Y Business Solutions (YYB Business Solutions Inc.) is a Bronx-based company located at 169 Lincoln Avenue, Suite 208, Bronx, NY 10454, reachable at (347) 270-1283. Founded and led by Valerie and Yerlin, the firm specializes in income taxes, immigration services, business license & registration, DMV & TLC services, and document translation. The company primarily serves Spanish-speaking immigrants and small business owners, helping them navigate U.S. immigration processes and tax requirements. They are most active on Instagram (@yybsolutions) and Facebook, where they share updates and client guidance. |
|||||
| Ransomware | YY Business Solutions id31489 View details | United States | IT | ||
|
yybusinesssolutions.com is an IT company based in the United States, offering various IT solutions. The company operates within the IT sector, providing services to its clients. yybusinesssolutions.com was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | YY Business Solutions id31489 View details | United States | IT | ||
|
Y&Y Business Solutions (YYB Business Solutions Inc.) is a Bronx-based company located at 169 Lincoln Avenue, Suite 208, Bronx, NY 10454, reachable at (347) 270-1283. Founded and led by Valerie and Yerlin, the firm specializes in income taxes, immigration services, business license & registration, DMV & TLC services, and document translation. The company primarily serves Spanish-speaking immigrants and small business owners, helping them navigate U.S. immigration processes and tax requirements. They are most active on Instagram (@yybsolutions) and Facebook, where they share updates and client guidance. |
|||||
| Ransomware | TopMark Funding id31236 View details | United States | Finance / Legal / Insurance | — | |
|
Topmarkfunding.com is a financial services company based in the US, operating in the finance, legal, and insurance sector. The company provides funding solutions to its clients. Topmarkfunding.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | TopMark Funding id31236 View details | United States | Finance / Legal / Insurance | — | |
|
topmarkfunding.com zoominfo.com/c/topmark-funding-llc/368696312 TopMark Funding is a nationwide commercial financing company specializing in fast funding solutions for semi-trucks, trailers, and heavy construction equipment. Headquartered in California, they help trucking and construction businesses acquire machinery ranging from $25,000 to $500,000. The company is recognized for providing quick approvals, flexible terms, and risk-free quotes without impacting the client's credit score |
|||||
| Ransomware | Control Concepts Technology id31237 View details | United States | Manufacturing / Engineering | — | |
|
Control Concepts Texas operates in the manufacturing and engineering sector, providing services in the United States. The company's specific offerings are not publicly detailed, but it is known to be involved in manufacturing and engineering activities. Control Concepts Texas was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Control Concepts Technology id31237 View details | United States | Manufacturing / Engineering | — | |
|
controlconceptstexas.com zoominfo.com/c/control-concepts--technology/356919279 Control Concepts is a Texas-based industrial automation and electronics repair company established in 1984. They specialize in servicing, repairing, and installing AC/DC motor drives, PLCs, and industrial motor controls. Operating as a certified UL508a Panel Shop, the company also provides 24-hour emergency service, system upgrades, and custom automation solutions |
|||||
| Ransomware | Philippine Savings Bank id31151 View details | Philippines | Finance / Legal / Insurance | — | |
|
PSBank is a Philippine-based financial institution that provides a range of banking and financial services to individuals and businesses in the Philippines. As part of the finance sector, it offers various products and services, including deposit accounts, loans, and investment products. PSBank operates in the finance, legal, and insurance sector, serving the Philippine market. It was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Philippine Savings Bank id31151 View details | Philippines | Finance / Legal / Insurance | — | |
|
psbank.com.ph zoominfo.com/c/philippine-savings-bank/83461899 SBank is widely recognized across the Philippines for its highly accessible Auto and Home Loan programs that make vehicle and property ownership easier for everyday consumers. One of its most unique financial products is the Flexi Personal Loan, a revolving credit line that allows clients to withdraw, repay, and reuse funds flexibly |
|||||
| Ransomware | Las Cenizas id31084 View details | Chile | Other | — | |
|
Cenizas.cl is a Chile-based entity operating in the other sector. The company likely provides various services to its clients in Chile. Cenizas.cl was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Las Cenizas id31084 View details | Chile | Other | — | |
|
cenizas.cl zoominfo.com/c/cenizas/430439098 Grupo Minero Las Cenizas, a prominent medium-scale mining company in Chile with over four decades of industry experience. The company specializes in the production of copper fines and cathodes. Its main mining operations and facilities are strategically located in Cabildo, Taltal, and Franke, Chile |
|||||
| Ransomware | Kenaitze Indian Tribe id31085 View details | United States | NGOs / Associations | — | |
|
Kenaitze.org is a non-profit organization based in the United States, operating in the NGOs and Associations sector. The organization provides various services and support to its community. Kenaitze.org was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Kenaitze Indian Tribe id31085 View details | United States | NGOs / Associations | — | |
|
kenaitze.org The Kenaitze Indian Tribe is a federally recognized sovereign nation of the Kahtnuht'ana Dena'ina people located on Alaska's Kenai Peninsula. Its core mission is "to assure Kahtnuht'ana Dena'ina thrive forever" through holistic, culturally grounded support. The Tribe operates the Dena'ina Wellness Center, providing comprehensive medical, dental, and behavioral health services, alongside education, elder care, and tribal fisheries to preserve their heritage and promote community well-being |
|||||
| Ransomware | Additive Manufacturing id31086 View details | United States | Manufacturing / Engineering | — | |
|
Additivemanufacturingllc.com is a company operating in the manufacturing and engineering sector in the United States. The company likely provides services related to additive manufacturing, a process of creating products by adding materials layer by layer. Additivemanufacturingllc.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Additive Manufacturing id31086 View details | United States | Manufacturing / Engineering | — | |
|
additivemanufacturingllc.com zoominfo.com/c/additive-manufacturing-llc/369228736 Additive Manufacturing LLC is a U.S.-based company headquartered in Las Vegas, Nevada, specializing in 3D printing, rapid prototyping, and short- to mid-run production of metal and plastic parts. Backed by over a century of combined industry experience, the company bridges digital fabrication and traditional manufacturing, offering services like CNC machining, production tooling, and assembly. By leveraging a global network of partners and on-demand digital factories, they ensure scalable, high-quality, and cost-effective solutions with reliable lead times |
|||||
| Ransomware | Salem Saleh Babgi id31087 View details | Saudi Arabia | Manufacturing / Engineering | — | |
|
Babgi.com.sa is a Saudi Arabian company operating in the manufacturing and engineering sector. The company is based in Saudi Arabia and likely provides various services and products related to manufacturing and engineering. Babgi.com.sa was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Salem Saleh Babgi id31087 View details | Saudi Arabia | Manufacturing / Engineering | — | |
|
babgi.com.sa zoominfo.com/c/salem-saleh-babgi-co-ltd/372739058 Babgi Group, founded in 1978 by Sheikh Salem Saleh Babgi, is a major Saudi Arabian conglomerate with over 1,900 employees and revenues exceeding $7.4 billion. The group operates primarily in the automotive sector (as an exclusive dealer for brands like Toyota, Lexus, and MG), trading, and contracting. Guided by a vision of sustainable economic growth, it focuses on delivering high-quality standards, advanced management practices, and community-driven services across the Kingdom |
|||||
| Ransomware | Salama Medicals Distributors Private id31088 View details | Tanzania, United Republic of | Healthcare / Pharma | — | |
|
Salamapharma.co.tz is a pharmaceutical company based in Tanzania, operating in the healthcare sector. The company likely provides medical supplies and pharmaceutical products to the local market. Salamapharma.co.tz was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Salama Medicals Distributors Private id31088 View details | Tanzania, United Republic of | Healthcare / Pharma | — | |
|
salamapharma.co.tz zoominfo.com/c/salama-medicals-distributors-private-ltd/356160819 Salama Pharmaceuticals Limited is Tanzania’s leading importer and distributor of pharmaceuticals, medical devices, and surgical equipment. Headquartered in Dar es Salaam, the company operates a large multi-warehouse distribution network to serve healthcare facilities across the country. Dedicated to enhancing healthcare outcomes, Salama Pharma focuses on supplying quality medical products and supporting the modernization of healthcare operations in the East African region |
|||||
| Ransomware | Krafman id31089 View details | Sweden | Other | — | |
|
Krafman.se is a Swedish entity operating in the other sector, providing various offerings to its customers. Located in Sweden, the company serves its clients with a range of services. Krafman.se was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Krafman id31089 View details | Sweden | Other | — | |
|
krafman.se Krafman (operated by Krafguard AB) is a Swedish credit reporting and debt collection service provider licensed and supervised by the Swedish Authority for Privacy Protection (IMY). The platform offers fast, on-demand credit checks for both businesses and private individuals without registering the number of inquiries made. It also provides free basic company searches, active credit monitoring with automatic updates, and transparent pricing with no hidden subscription fees |
|||||
| Ransomware | Kosh Innovations id31090 View details | IT | — | ||
|
Koshinnovations.com is an IT sector company, presumably operating in the information technology industry, although specific details about its location and offerings are not readily available. As an entity in the IT sector, it may provide various services such as software development, consulting, or technology solutions. Koshinnovations.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Kosh Innovations id31090 View details | IT | — | ||
|
koshinnovations.com zoominfo.com/c/kosh-innovations/369426368 Kosh Innovations, established in 2008 in Pondicherry, India, is a leading manufacturing solutions provider specializing in precision engineering, plastic moulding, sheet metal components, and electronic manufacturing services (EMS). Certified with IATF 16949 and multiple ISO standards, the company serves diverse sectors including automotive, consumer durables, green-tech, and healthcare. With a strategic presence across six locations in India, Kosh Innovations is committed to delivering customized, sustainable, and high-quality products through a customer-centric and innovative approach |
|||||
| Ransomware | Saturn Industries id31091 View details | United States | Manufacturing / Engineering | — | |
|
Saturnind.com is a company operating in the manufacturing and engineering sector in the United States, providing various products and services to its clients. The company's offerings cater to the needs of its customers in the respective industry. Saturnind.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Saturn Industries id31091 View details | United States | Manufacturing / Engineering | — | |
|
saturnind.com zoominfo.com/c/saturn-industries-ltd/348367401 Saturn Industries, based in Winnipeg, Manitoba, is a specialized manufacturer of custom-engineered trailers and overhead lifting products. Operating as a division of BROCK LEMKO Inc., the company serves demanding sectors such as construction, marine, powerline, mining, and aerospace. Since 1996, they have built a strong reputation for designing and fabricating tailored solutions, including dump trailers, lifting beams, and personnel baskets. Their focus remains on durability, safety, and delivering highly customized industrial equipment to meet specific client applications |
|||||
| Ransomware | Acosta Sons id31092 View details | United States | Construction / Real Estate | — | |
|
Acosta and Sons is a construction and real estate company based in the United States, providing services within the sector. The company operates in the construction and real estate industry, offering various services to clients. Acosta and Sons was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Acosta Sons id31092 View details | United States | Construction / Real Estate | — | |
|
acostaandsons.com zoominfo.com/c/acosta--sons-inc/398811105 Acosta and Sons is a family-owned appliance sales and repair company based in The Bronx, New York, with additional locations serving the broader New York area. They specialize in providing a wide range of home appliances at discounted prices, catering to both individual customers and property management or landlord accounts. The company is known for its reliable customer service, offering comprehensive solutions from appliance sales to professional repair and maintenance. |
|||||
| Ransomware | CFS id31093 View details | United States | Manufacturing / Engineering | — | |
|
cfsinc.com operates in the manufacturing and engineering sector, providing services in the United States. As a company in this sector, cfsinc.com likely offers a range of products and services related to manufacturing and engineering. cfsinc.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | CFS id31093 View details | United States | Manufacturing / Engineering | — | |
|
cfsinc.com zoominfo.com/c/cfs-inc/12944410 CFS Inc. is a Massachusetts-based marketing support services company with over 30 years of experience in print management, direct mail, kitting, promotional items, and fulfillment. Acting as a single-source solution, they handle projects from initial design to final execution, helping businesses streamline their marketing and logistical operations. The company is known for its flexible, customer-centric approach and a strong commitment to delivering high-quality, reliable results for clients of all sizes |
|||||
| Ransomware | OHK Energy id31094 View details | Singapore | Energy | — | |
|
Ohkenergy.com is an energy company based in Singapore, operating in the energy sector. The company likely provides energy-related services and offerings to its customers in the region. Ohkenergy.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | OHK Energy id31094 View details | Singapore | Energy | — | |
|
ohkenergy.com rocketreach.co/ohk-energy-profile_b6d2700bc7449e3f OHK Energy is Ireland’s largest and most trusted renewable energy provider and retrofit specialist, registered with the Sustainable Energy Authority of Ireland (SEAI). The company specializes in designing and installing solar PV, heat pumps, battery storage, and EV chargers for homeowners, businesses, farms, and communities. With a service-driven and future-focused approach, OHK Energy is dedicated to building a cleaner, more sustainable island by delivering tailored, high-quality energy solutions |
|||||
| Ransomware | OHK Energy id31094 View details | Ireland | Energy | — | |
|
ohkenergy.com rocketreach.co/ohk-energy-profile_b6d2700bc7449e3f OHK Energy is Ireland’s largest and most trusted renewable energy provider and retrofit specialist, registered with the Sustainable Energy Authority of Ireland (SEAI). The company specializes in designing and installing solar PV, heat pumps, battery storage, and EV chargers for homeowners, businesses, farms, and communities. With a service-driven and future-focused approach, OHK Energy is dedicated to building a cleaner, more sustainable island by delivering tailored, high-quality energy solutions |
|||||
| Ransomware | Hutch Paving id31095 View details | United States | Construction / Real Estate | — | |
|
Hutchpaving.com operates in the construction and real estate sector in the United States, providing paving services. As a company in this sector, it is involved in various construction and infrastructure projects. Hutchpaving.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Hutch Paving id31095 View details | United States | Construction / Real Estate | — | |
|
hutchpaving.com zoominfo.com/c/hutch-paving-inc/38258180 Hutch Paving is a highly respected asphalt and concrete paving contractor based in Southeast Michigan, serving the region since 1993. The company specializes in comprehensive pavement solutions, including resurfacing, maintenance, sealcoating, and new construction for commercial, municipal, industrial, and residential clients. Known for its safety-first approach, modern equipment, and attention to detail, Hutch Paving is committed to delivering durable, high-quality infrastructure with exceptional customer service |
|||||
| Ransomware | CRB group id31096 View details | Brazil | Manufacturing / Engineering | — | |
|
CRB Group is a Brazilian company operating in the manufacturing and engineering sector, providing various offerings to its clients. The company is based in Brazil and serves the local market with its products and services. CRB Group was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | CRB group id31096 View details | Brazil | Manufacturing / Engineering | — | |
|
crbgroup.com zoominfo.com/c/crb-group-gmbh/23317692 CRB is a leading global provider of sustainable engineering, architecture, construction, and consulting solutions, primarily serving the life sciences and food & beverage industries. Headquartered in Kansas City, Missouri, the company specializes in designing and building advanced facilities, such as cell and gene therapy laboratories and high-quality food manufacturing plants. With a strong international presence, CRB is dedicated to delivering innovative, safe, and efficient infrastructure that improves patient outcomes and advances scientific breakthroughs worldwide |
|||||
| Ransomware | Partition Specialties id31097 View details | United States | IT | — | |
|
psi3g.com is an IT company based in the United States, providing various services within the IT sector. The company operates in the US, offering solutions to its clients. psi3g.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Partition Specialties id31097 View details | United States | IT | — | |
|
psi3g.com zoominfo.com/c/partition-specialties-inc/90587733 Partition Specialties, Inc. (PSI), founded in 1958, is a leading commercial interior contractor based in California, serving clients across California and Northern Nevada. The company specializes in tailored architectural space management solutions, including high-quality movable partitions, demountable wall systems, and acoustic dividers. With decades of expertise, PSI helps corporate, hospitality, and industrial clients optimize their interior layouts with flexible, functional, and aesthetically pleasing design products |
|||||
| Ransomware | Preferred id31098 View details | United States | Retail / E-commerce | — | |
|
Preferredtool.com operates in the retail and e-commerce sector, providing various tools and products to customers in the United States. As an online retailer, the company offers a range of products and services to its customers. Preferredtool.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Preferred id31098 View details | United States | Retail / E-commerce | — | |
|
preferredtool.com Preferred Tool & Die is a precision manufacturing company based in Shelton, Connecticut, specializing in custom metal and plastic injection molds as well as complex stamped components. The company serves demanding sectors, including the medical, electrical, consumer products, and automotive industries. Holding ISO and FDA registrations, they are committed to delivering high-quality, reliable, and innovative manufacturing solutions tailored to exact client specifications |
|||||