Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1001 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1001 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-16 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1001 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 8 0.8%
  • Pending 993 99.2%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 2h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 2h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (20)

    Victims (1001)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 201–300 of 1001.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Thai Film Industries PCL id32281 View details Thailand IT — pending
    Ransomware Adkisson Group id32282 View details United States IT — pending
    Ransomware ESB Puerto Rico Corp id32283 View details Puerto Rico IT — pending
    Ransomware Nutrypollo id32284 View details Mexico Retail / E-commerce — pending
    Ransomware Brebur id32285 View details United Kingdom Retail / E-commerce — pending
    Ransomware MB Associates id32286 View details United Kingdom Services — pending
    Ransomware Exacta Optech Labcenter id32287 View details Brazil IT — pending
    Ransomware Servicios Aereos Estrella id32288 View details Mexico IT — pending
    Ransomware Zion Construction id32203 View details United States Construction / Real Estate — pending
    Ransomware Party Rental id32154 View details United Kingdom Retail / E-commerce — pending
    Ransomware TEC Container id32155 View details Brazil IT — pending
    Ransomware Verbux id32156 View details Germany Transportation / Travel / Logistics — pending
    Ransomware Espinos id32157 View details Mexico Energy — pending
    Ransomware Incolur id32158 View details Chile Services — pending
    Ransomware AGS Cinemas id32022 View details India Services — pending
    Ransomware Eyecare Center of Snohomish id32023 View details United States Healthcare / Pharma — pending
    Ransomware Gould Sherwood Consulting id32024 View details United States Services — pending
    Ransomware Espac id32025 View details Chile Services — pending
    Ransomware Layher id32026 View details Chile Services — pending
    Ransomware Volktek id32027 View details Taiwan, Province of China IT — pending
    Ransomware Meridian Logistics Group id31958 View details United States — — pending
    Ransomware UOLconsult id31976 View details Austria — — pending
    Ransomware dlp motive id31977 View details Germany — — pending
    Ransomware AWJ Holding id31978 View details United Arab Emirates — — pending
    Ransomware Lexacaucho id31979 View details — — pending
    Ransomware LOG Systems id31980 View details Poland — — pending
    Ransomware Magdalena Grand Beach Golf Resort id31981 View details Mexico — — pending
    Ransomware Akatake Engineering id31982 View details Japan — — pending
    Ransomware ESCON Group id31983 View details United States — — pending
    Ransomware Almeer id31984 View details United Arab Emirates — — pending
    Ransomware Geb Sas id31985 View details France — — pending
    Ransomware ARBEITERKAMMERN id31986 View details Austria — — pending
    Ransomware Aquasea id31987 View details Norway — — pending
    Ransomware CAZ Investments id31988 View details Belize — — pending
    Ransomware Oceanica Internacional id31989 View details Samoa — — pending
    Ransomware Ariel Energia id31990 View details Italy — — pending
    Ransomware BioPharma id31849 View details United States — — pending
    Ransomware P**** R***** id31850 View details — — pending
    Ransomware Euroscreen id31911 View details Italy — — pending
    Ransomware CRASL id31912 View details United Kingdom — — pending
    Ransomware Senvest Capital id31913 View details Canada — — pending
    Ransomware Roadvision Systems id31914 View details Sweden — — pending
    Ransomware Babcock id31915 View details South Africa — — pending
    Ransomware IPS id31673 View details Italy IT — pending
    Ransomware Gfeller Treuhand und Verwaltungs id31675 View details Switzerland — — pending
    Ransomware Gravity Coffee id31677 View details United States — — pending
    Ransomware Ollies Place Kidswear id31679 View details Australia — — pending
    Ransomware The Coffee Bean id31680 View details Malaysia — — pending
    Ransomware KFC Kosova id31681 View details — — pending
    Ransomware First Coast Heart Vascular Center id31682 View details United States — — pending
    Ransomware Cityside Homes id31683 View details United Kingdom — — pending
    Ransomware Retail Business Management Systems id31684 View details United Kingdom — — pending
    Ransomware TOA id31685 View details Japan — — pending
    Ransomware Tempel id31686 View details Germany — — pending
    Ransomware Plaza Auto Mall id31687 View details Mexico — — pending
    Ransomware Avanta Maroc Ex Adecco id31688 View details Morocco — — pending
    Ransomware EKEPIS id31689 View details Greece — — pending
    Ransomware Megalaser Industria Metalurgica LTDA id31690 View details Brazil — — pending
    Ransomware Community Connections id31691 View details United States — — pending
    Ransomware Acli id31692 View details Italy — — pending
    Ransomware Vector Two Technology id31693 View details Brazil IT — pending
    Ransomware Safeware id31658 View details United States IT — pending
    Ransomware PharmaEssentia id31506 View details Taiwan, Province of China Healthcare / Pharma — pending
    Ransomware CONTAC Ingenieros id31507 View details Chile IT — pending
    Ransomware RAK Construction id31508 View details India Construction / Real Estate — pending
    Ransomware Lancesoft India id31509 View details India IT — pending
    Ransomware AIMS Group id31510 View details United Kingdom IT — pending
    Ransomware AnMed id31511 View details United States Healthcare / Pharma — leaked
    Ransomware NTU Alumni Club id31512 View details Singapore NGOs / Associations — pending
    Ransomware Canopy Support Services id31513 View details Canada Healthcare / Pharma — pending
    Ransomware Mikel Coffee id31514 View details Greece Retail / E-commerce — pending
    Ransomware Hong Kong Baptist University id31515 View details Hong Kong Education — pending
    Ransomware Eva Care id31516 View details United Kingdom Healthcare / Pharma — pending
    Ransomware Premier Pigs id31517 View details United Kingdom Agriculture / Food — pending
    Ransomware Zion Contracting id31518 View details United States Construction / Real Estate — pending
    Ransomware Hartfiel Automation id31464 View details Germany Other — pending
    Ransomware DHC id31435 View details Japan — — pending
    Ransomware INKA Group GmbH Co id31436 View details Germany — — pending
    Ransomware Vitex Pharmaceuticals id31437 View details — — pending
    Ransomware Mdj Management id31438 View details — — pending
    Ransomware Hst id31439 View details United States — — pending
    Ransomware Groupe BPCE id31440 View details Viet Nam — pending
    Ransomware Axson Teknik id31441 View details Sweden — — pending
    Ransomware Ponti id31442 View details Poland — — pending
    Ransomware Godollo id31443 View details Hungary — — pending
    Ransomware Hoang Chiropractic Center id31444 View details United States — — pending
    Ransomware aZaaS id31445 View details Singapore — — pending
    Ransomware HIWIN id31446 View details Italy — — pending
    Ransomware National Furniture Outlet id31447 View details United States — — pending
    Ransomware TESI id31448 View details Italy — — pending
    Ransomware Intranet Gov Brasil id31449 View details Brazil — — pending
    Ransomware Feraboli Zootech id31450 View details Italy — — pending
    Ransomware Nobema id31451 View details Germany Media / Entertainment — pending
    Ransomware Vemec id31452 View details Argentina — — pending
    Ransomware LensAss Architecten id31453 View details Belgium — — pending
    Ransomware Phase Technologies id31454 View details United States — — pending
    Ransomware Holborn European Marketing id31455 View details Cyprus — — pending
    Ransomware ZS Salovnova id31456 View details Czechia — — pending
    Ransomware Halliday Watkins Mann id31457 View details United States — — pending
    Ransomware YY Business Solutions id31489 View details United States IT pending