Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 1040 published victims and 2 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Thegentlemen is tracked by Breach House as a ransomware group with 1040 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 2 | Onion service | Down checked 14m ago | i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion |
| Leak location 1 | Onion service | Down checked 14m ago | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
Top Activity Sectors (20)
- IT 110
- Manufacturing / Engineering 103
- Communication / Marketing 88
- Healthcare / Pharma 66
- Finance / Legal / Insurance 50
- Retail / E-commerce 49
- Construction / Real Estate 48
- Services 38
- Transportation / Travel / Logistics 27
- Not identified 27
- Agriculture / Food 23
- Education 21
- Public Sector 20
- Energy 18
- NGOs / Associations 12
- Hospitality / Food & Beverage / Tourism 12
- Telecommunications 6
- Media / Entertainment 1
- Law Enforcement / Public Sector 1
- Research 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Thegentlemen, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: thegentlemen executes PowerShell scripts to run payload logic, disable defenses, and propagate across systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: thegentlemen modifies registry run keys and startup locations to maintain persistence after reboots.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: thegentlemen disables or modifies security tools such as EDR and AV processes to hinder incident response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: thegentlemen deletes Volume Shadow Copies and backup artifacts via system commands to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1003.001 LSASS Memory Credential Access
What they do: thegentlemen accesses LSASS memory to steal credentials for lateral movement and privilege escalation.
What that means: Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
-
T1135 Network Share Discovery Discovery
What they do: thegentlemen uses network share discovery to locate victim file shares and map accessible storage paths for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: thegentlemen uses SMB/Windows Admin Shares for lateral movement between networked hosts in manufacturing and IT environments.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: thegentlemen encrypts victim files and data stores using ransomware payloads to maximize impact and extortion pressure.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: thegentlemen calls system recovery inhibitors to block restore processes and harden ransomware impact.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
-
T1491.001 Internal Defacement Impact
What they do: thegentlemen performs internal defacement by replacing victim files with ransom notes and altered content.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (40)
▼Software Thegentlemen has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
DumpBrowserSecrets
KslKatz
Mimikatz
Defense evasion
EDRStartupHinder
KslDump
PowerRun
RedSun
ThrottleStop driver (BYOVD)
Discovery & enumeration
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
Nmap
MANSPIDER
PrivHound
RelayKing-Depth
Shodan
TaskHound
Exfiltration
RClone
WinSCP
LOLBAS (living-off-the-land binaries)
PsExec
Networking & tunnelling
Amnezia VPN
Chisel
Cloudflared
OpenVPN
Proxychains
PuTTY
Wireguard VPN
Offensive security tooling
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
Remote monitoring & management
AnyDesk
FreeRDP
MeshAgent
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-GENTLEMEN_3.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 13343E50C1B3466F0EA35B5B3E55A044CB7132FD28A8665EFEA0E5848E276D548C21B79F15C2 Download Tox messenger: https://tox.chat/download.html Contact us (add via SimpleX): https://smp14.simplex.im/a#4mlOiePV8NBXOv2QrZ9CaPeRPm1mBUgxn4SdpFnm978 Download SimpleX https://simplex.chat/downloads/ СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/TheGentlemen26 Clearnet blog link: https://thegentlemen.cc/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats. We have stolen more than 100 GB of your corporate information from your servers, including critically important data. Your company is facing a massive information security breach. A total data leak has occurred. This greatly increases the risk of colossal financial and reputational losses.
README-GENTLEMEN_2.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 98C132E2B20B531BE6604397D97040C1E9EB42FCE12EDF119BCE8B4031CA5C70DAF5E65FA3C3 Download Tox messenger: https://tox.chat/download.html Contact us (add via Session ID): 05809b2da1d5b1a302f48b5767fd1843d54f3c516f9ab0eb26b544ffa73340292e Download Session https://getsession.org СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats.
README-GENTLEMEN.txt
[snip] = YOUR ID Gentlemen, your network is under our full control. All your files are now encrypted and inaccessible. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E Download Tox messenger: https://tox.chat/download.html COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1040)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 201–300 of 1040.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Premier Fiduciary id31099 View details | United Kingdom | Finance / Legal / Insurance | — | |
|
Premier Fiduciary is a company operating in the finance, legal, and insurance sector in Great Britain. The firm provides fiduciary services, which typically involve managing assets and making financial decisions on behalf of clients. Premier Fiduciary was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Premier Fiduciary id31099 View details | United Kingdom | Finance / Legal / Insurance | — | |
|
premierfiduciary.com zoominfo.com/c/premier-fiduciary/346765473 Premier Fiduciary is a global corporate and fiduciary services provider specializing in tailored solutions for private wealth clients, family offices, and investment managers. The company offers comprehensive services, including fund administration, trustee services, corporate setup, and regulatory compliance, with a strong presence in key financial hubs like Singapore and Hong Kong. Their mission is to build long-term relationships based on trust, delivering high-quality, holistic financial and administrative support to protect and grow client legacies |
|||||
| Ransomware | Bater id31100 View details | Poland | Retail / E-commerce | — | |
|
Bater.pl is a retail and e-commerce company based in Poland, offering various products and services to its customers. As an e-commerce platform, it provides online shopping experiences for users in Poland. Bater.pl was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Bater id31100 View details | Poland | Retail / E-commerce | — | |
|
bater.pl zoominfo.com/c/bater-ltd/429692403 Bater is a leading Polish manufacturer of traction and stationary batteries, founded in 1990 with production facilities in Warsaw and Gliwice. The company specializes in producing high-quality battery systems for electric forklifts, reserve power, and renewable energy applications, along with recombination plugs and protective battery racks. Holding ISO 9001 and ISO 14001 certifications, Bater also provides comprehensive nationwide services, including battery assembly, maintenance, room renovation, and recycling |
|||||
| Ransomware | Precision Concrete Pumping id31101 View details | United States | Construction / Real Estate | — | |
|
Precisionconcretepump.com is a US-based company operating in the construction and real estate sector, likely providing concrete pumping services. The company's offerings may include equipment and labor for construction projects. Precisionconcretepump.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Precision Concrete Pumping id31101 View details | United States | Construction / Real Estate | — | |
|
precisionconcretepump.com zoominfo.com/c/precision-concrete-pumping-inc/356699459 Precision Concrete Pumping, Inc. is an MBE-certified concrete pumping company established in 1988, with branches across New York and New Jersey. The company specializes in providing high-quality concrete pumping services, including boom pumps, line pumps, and telebelts, utilizing a modern fleet of Putzmeister and Schwing equipment. With over 25 years of experience, they serve commercial, industrial, and municipal projects throughout the Northeast, ensuring reliable performance and exceptional customer service |
|||||
| Ransomware | Clear Vision Signs id31102 View details | United Kingdom | Manufacturing / Engineering | — | |
|
Clear Vision Signs is a company based in the United Kingdom, operating in the manufacturing and engineering sector. The company likely provides signage solutions, given its name. Clear Vision Signs is listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Clear Vision Signs id31102 View details | United Kingdom | Manufacturing / Engineering | — | |
|
clearvisionsigns.net zoominfo.com/c/clear-vision-signs/365480092 Clear Vision Signs is a full-service architectural signage and graphics company based in Dade City, Florida, serving clients nationwide. They specialize in turnkey solutions, including wayfinding systems, ADA-compliant signage, environmental graphics, and comprehensive project management. By acting as a single trusted partner for developers and property managers, they ensure efficient, safe, and visually impactful signage programs from initial concept to final installation |
|||||
| Ransomware | Orsima id31103 View details | IT | — | ||
|
Orsima.com operates within the IT sector, providing various services. The company's specific location and offerings are not publicly disclosed. Orsima.com was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Orsima id31103 View details | IT | — | ||
|
orsima.com zoominfo.com/c/orsima/347930414 ORSIMA is a leading Algerian IT services company with over 30 years of expertise in digital transformation, data center modernization, and cybersecurity. As a strategic partner of major technology providers like Dell Technologies and Microsoft, it offers comprehensive solutions including managed services, software licensing optimization, and professional training. The company is dedicated to helping enterprises and institutions in Algeria optimize their IT infrastructure and ensure high availability and business continuity |
|||||
| Ransomware | The Municipal Chamber of Serra id31104 View details | Brazil | Public Sector | — | |
|
Camaraserra.es.gov.br is a government website in the state of Espirito Santo, Brazil, serving the public sector. It provides various online services and information to citizens. Camaraserra.es.gov.br was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | The Municipal Chamber of Serra id31104 View details | Brazil | Public Sector | — | |
|
camaraserra.es.gov.br The Municipal Chamber of Serra (Câmara Municipal da Serra) is the legislative body of the city of Serra, located in the state of Espírito Santo, Brazil. As the largest legislative house in the state, it is composed of elected councilors responsible for creating local laws, overseeing the executive branch, and representing the citizens' interests. The institution is committed to transparency, active public participation, and the sustainable development of the municipality through its plenary sessions and specialized committees. |
|||||
| Ransomware | Efrata College of Education id31105 View details | Israel | Healthcare / Pharma | — | |
|
Emef ac il is an entity operating in the healthcare sector in Israel, providing medical services and offerings. As a healthcare organization, emef ac il is committed to delivering quality care to its patients. Emef ac il was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Efrata College of Education id31105 View details | Israel | Healthcare / Pharma | — | |
|
emef.ac.il zoominfo.com/c/efrata-college-of-education/1337375131 Emuna-Efrata Academic College is a higher education institution located formed by the merger of Efrata College of Education and Emuna College of Arts. The college offers unique bachelor's and master's degree programs focusing on education (early childhood, elementary, special, and secondary) and the arts (visual communication, theater, and fine arts). With over 40 years of experience, it is dedicated to training leading female educators and creators, providing a supportive, values-driven academic environment. |
|||||
| Ransomware | Amicell id31106 View details | Israel | IT | — | |
|
Amicell.co.il is an Israeli IT company providing various services. The company operates in the information technology sector in Israel. Amicell.co.il was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Amicell id31106 View details | Israel | IT | — | |
|
amicell.co.il zoominfo.com/c/amicell/426539109 Amicell (Amit Industries Ltd.) is a leading Israeli manufacturer founded in 1989, specializing in custom-designed battery packs, chargers, and Battery Management Systems (BMS). Headquartered in Ashdod, the company provides advanced energy solutions for demanding sectors, including defense, medical, UAVs, robotics, and industrial applications. With over 35 years of experience, Amicell is recognized for delivering reliable, high-tech power systems tailored to complex operational requirements |
|||||
| Ransomware | Paula Fish id31107 View details | Poland | Retail / E-commerce | — | |
|
Paulafish.pl is an e-commerce company based in Poland, operating in the retail sector. The company likely offers various products online to customers in Poland and possibly other countries. Paulafish.pl was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Paula Fish id31107 View details | Poland | Retail / E-commerce | — | |
|
paulafish.pl zoominfo.com/c/paula-fish/448451882 Paula Fish is a market leader in fish processing in Central Europe, headquartered in Słupsk, Poland. Founded in 1998, the company specializes in the catching, production, freezing, and storage of Baltic fish and Atlantic salmon. With a workforce of over 500 employees, it operates globally, emphasizing high-quality products, innovation, and strict environmental responsibility throughout its supply chain |
|||||
| Ransomware | Known id31108 View details | Iceland | IT | — | |
|
Known.is is an Icelandic company operating in the IT sector, providing various services. The company is based in Iceland and offers its services to clients. Known.is was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Known id31108 View details | Iceland | IT | — | |
|
known.is zoominfo.com/c/known/480652891 Known is an award-winning, data-driven marketing, creative, and media agency headquartered in New York. The company uniquely combines PhD data scientists with world-class creatives to deliver measurable performance and breakthrough brand strategies for major clients like Microsoft, TikTok, and Grubhub. Recognized by Ad Age and Adweek as a top-tier agency, Known is dedicated to setting a new standard for modern marketing through science-led innovation and rigorous analytics |
|||||
| Ransomware | Peachtree Group id31109 View details | United States | Finance / Legal / Insurance | — | |
|
Peachtree Group is a financial services company based in the United States, operating in the finance, legal, and insurance sector. The company provides various financial services to its clients. Peachtreegroup.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Peachtree Group id31109 View details | United States | Finance / Legal / Insurance | — | |
|
peachtreegroup.com zoominfo.com/c/peachtree-group/5000000011 Peachtree Group is a vertically integrated investment management firm headquartered in Atlanta, Georgia, with a history dating back to 1979. The company specializes in identifying mispriced risk and capitalizing on dislocated market opportunities across private credit, real estate, and equity investments. Managing billions in assets, Peachtree Group provides comprehensive financing solutions—including permanent loans, bridge financing, and mezzanine capital—while offering dedicated services to protect and grow its investments |
|||||
| Ransomware | Municipalidad de San Luis id31110 View details | Peru | Public Sector | — | |
|
Munisanluis.gob.pe is a government website in Peru, providing public services and information to citizens. As a public sector entity, it offers various online resources and functionalities. Munisanluis.gob.pe was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Municipalidad de San Luis id31110 View details | Peru | Public Sector | — | |
|
munisanluis.gob.pe zoominfo.com/c/municipalidad-de-san-luis/1322909314 The District Municipality of San Luis is the local government body for the San Luis district in Lima, Peru, dedicated to promoting the integral development and well-being of its residents. Its core mission is to lead, regulate, and provide essential public services while fostering community engagement through cultural, sports, and safety programs. The municipality actively modernizes its operations, offering digital platforms for online procedures and payments to ensure efficient, accessible, and transparent governance |
|||||
| Ransomware | World Wide Fittings id31111 View details | United Kingdom | Manufacturing / Engineering | — | |
|
Worldwidefittings.com operates in the manufacturing and engineering sector, providing various products and services to clients in the United Kingdom. As a key player in its industry, the company offers a range of fittings and related solutions. Worldwidefittings.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | World Wide Fittings id31111 View details | United Kingdom | Manufacturing / Engineering | — | |
|
worldwidefittings.com zoominfo.com/c/world-wide-fittings-inc/42729844 World Wide Fittings, Inc. is a global manufacturer of precision-engineered steel and stainless steel hydraulic tube and pipe fittings, founded in 1950 and headquartered in Vernon Hills, Illinois. Operating from nine facilities across three continents, the company supplies over 150 million components annually to OEMs and distributors in industries like automation, manufacturing, and fluid power. With a strong focus on in-house manufacturing, strict quality control, and vast in-stock inventory, they ensure reliable, on-time delivery of specialized fittings worldwide |
|||||
| Ransomware | Chemco Systems id31112 View details | United States | IT | — | |
|
Chemcosystems.net operates in the IT sector in the United States, providing various services. As a company in the IT sector, chemcosystems.net likely offers solutions related to information technology. Chemcosystems.net was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Chemco Systems id31112 View details | United States | IT | — | |
|
chemcosystems.net zoominfo.com/c/chemco-systems-lp/39588004 Chemco Systems is a world leader in the design and manufacturing of bulk chemical storage, handling, and feed systems for air and water pollution treatment, operating since 1980. The company provides tailored engineering, fabrication, and installation services, delivering innovative and cost-effective solutions without compromising safety or quality. With decades of industry experience, Chemco Systems is committed to superior product reliability, efficient customer service, and the continuous professional growth of its team |
|||||
| Ransomware | Total Auto Business Solutions id31113 View details | United States | IT | — | |
|
Autorepairsoftware.com is an IT company based in the United States, offering software solutions for the automotive repair industry. The company provides digital tools to facilitate efficient repair shop operations. Autorepairsoftware.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Total Auto Business Solutions id31113 View details | United States | IT | — | |
|
autorepairsoftware.com Total Auto Business Solutions, Inc. (TABS) is a leading provider of comprehensive shop management software, best known for its flagship product, AutoFluent. Founded in 2001 and based in Northern California, the company serves auto repair shops, tire dealers, and fleet operators across the US and Canada. Their all-in-one platform streamlines daily operations by seamlessly integrating scheduling, inventory management, accounting, and customer relationship tools into a single, user-friendly system |
|||||
| Ransomware | Okovolt Solartechnik id31114 View details | Germany | Energy | — | |
|
Oekovolt.com is an energy sector company based in Germany, providing services related to the energy industry. The company operates in the German energy market, offering various energy-related solutions. Oekovolt.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Okovolt Solartechnik id31114 View details | Germany | Energy | — | |
|
oekovolt.com Ökovolt Solartechnik GmbH is an Austrian company specializing in the planning, installation, and maintenance of photovoltaic systems for private, commercial, and industrial clients. Based in Upper Austria with over 15 years of experience, the firm provides comprehensive, customized solar energy solutions to promote sustainability and energy independence. They focus on high-quality components, expert consulting, and reliable service to maximize the efficiency and lifespan of every solar project |
|||||
| Ransomware | Pertamina id31115 View details | Indonesia | Energy | — | |
|
Pertamina.com is the official website of Pertamina, Indonesia's state-owned energy company, operating in the energy sector, providing various energy-related services and products in Indonesia. As a major player in the country's energy industry, Pertamina plays a significant role in the development and distribution of energy resources. Pertamina.com was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Pertamina id31115 View details | Indonesia | Energy | — | |
|
pertamina.com REV - $23.2 Billion zoominfo.com/c/pt-pertamina/191250883 Pertamina is an energy company primarily in the oil and gas sector. The company provides services for new and renewable energy, and other activities related to or supporting business activities. We have taken NDA files, HR DATA, user data, employee data, technical drawings, models, bank accounting tax legal statements, SCADA documents, confidential files, photographs of work, screenshots and much more the total data volume is more than 1.2TB+ 1200 GB+ . Pertamina is Indonesia’s state-owned integrated energy corporation, operating across upstream, downstream, gas, and renewable energy sectors. With over six decades of operation, it is a primary driver of national energy sovereignty and consistently ranks among the Fortune Global 500 companies. |
|||||
| Ransomware | Promatrix id31032 View details | United States | IT | — | |
|
Promatrixcorp.com is an IT company based in the United States, providing various IT services. As an IT sector entity, promatrixcorp.com operates in a critical industry. Promatrixcorp.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Promatrix id31032 View details | United States | IT | — | |
|
promatrixcorp.com zoominfo.com/c/promatrix-corp/347777611 Promatrix Corp is a rapidly growing IT consulting and outsourcing company based in New Jersey, USA. They deliver comprehensive global technology solutions, including web application development, managed IT services, and staff augmentation. The company also specializes in enterprise resource planning (SAP) support and HR outsourcing to help businesses optimize their operations and scale efficiently |
|||||
| Ransomware | Malaysian Nuclear Agency id31033 View details | Malaysia | Public Sector | — | |
|
Nuclearmalaysia.gov.my is a Malaysian government website related to nuclear energy. It provides information on nuclear energy, radiation safety, and related research in Malaysia. The website serves as a resource for the public sector, offering information on nuclear applications, safety, and regulations. Nuclearmalaysia.gov.my was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Malaysian Nuclear Agency id31033 View details | Malaysia | Public Sector | — | |
|
nuclearmalaysia.gov.my zoominfo.com/c/malaysian-nuclear-agency/459120141 The Malaysian Nuclear Agency (Nuklear Malaysia) is the leading government research and development organization in nuclear science and technology. It focuses on the peaceful application of nuclear innovations to support national development, including medical radiopharmaceuticals, food security, and industrial safety. Additionally, the agency plays a key role in radiation safety, human resource development, and the responsible management of radioactive waste in the country |
|||||
| Ransomware | Delkart Industries Pvt id31034 View details | India | Manufacturing / Engineering | — | |
|
Delkart Industries is a manufacturing and engineering company based in India, offering various products and services to its clients. The company operates in the manufacturing and engineering sector, providing solutions to its customers. Delkart Industries was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Delkart Industries Pvt id31034 View details | India | Manufacturing / Engineering | — | |
|
delkartindustries.com zoominfo.com/c/delkart-industries-pvt-ltd/471455561 Delkart Industries is an Indian manufacturing company established in 2017, specializing in custom felts, automobile carpets, and noise and thermal insulation parts. The company serves the automotive, home appliance, robotics, and industrial sectors with high-quality, customized solutions. With multiple manufacturing plants across India and IATF 16949 / ISO 9001 certifications, it ensures reliability, innovation, and trusted partnerships with leading global brands |
|||||
| Ransomware | ETA Technology Pvt id31035 View details | India | IT | — | |
|
etatechnology.in is an Indian IT company providing various technology services. The company operates in the IT sector, offering its services to clients in India. etatechnology.in was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | ETA Technology Pvt id31035 View details | India | IT | — | |
|
etatechnology.in zoominfo.com/c/eta-technology-pvt-ltd/432054929 ETA Technology is a Bangalore-based manufacturing company founded in 1991, specializing in the design and production of advanced welding and forging equipment. They build rotary friction welders, friction stir welding systems, electrical upsetters, and custom test rigs for critical industries like automotive, aerospace, and e-mobility. With over 1,300 machines delivered to more than 20 countries, the company is known for its engineering precision, minimal rejection rates, and reliable global support |
|||||
| Ransomware | Kontact Consortium India Pvt id31036 View details | India | IT | — | |
|
kontact.in is an Indian IT company, operating in the information technology sector. The company is based in India and provides various IT services. kontact.in was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Kontact Consortium India Pvt id31036 View details | India | IT | — | |
|
kontact.in zoominfo.com/c/kontact-consortium-india-pvt-ltd/437934184 Kontact is an Indian engineering company with over 50 years of experience, specializing in electrical and mechanical solutions for the railway, infrastructure, and industrial sectors. They provide end-to-end services, including railway rolling stock supplies, LV/MV power distribution panels, and electrical contracting, backed by a 40,000+ sq. ft. manufacturing facility. The company is recognized for its reliability and quality, holding key international certifications such as ISO 9001, IRIS, and EN 15085-2 |
|||||
| Ransomware | Upanal CNC Solutions id31037 View details | Peru | Manufacturing / Engineering | — | |
|
Upanalcnc.com is a company based in Peru, operating in the manufacturing and engineering sector. The company likely provides services and products related to computer numerical control, given its name. Upanalcnc.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Upanal CNC Solutions id31037 View details | Peru | Manufacturing / Engineering | — | |
|
upanalcnc.com zoominfo.com/c/upanal-cnc-solutions/370526030 Upanal CNC Solutions is an Indian company specializing in advanced metal cutting and metal forming technologies, particularly CNC machinery. Beyond supplying equipment, they provide comprehensive services including machine modernization, 24/7 technical support, and structured training programs for operators and engineers. Headquartered in Bangalore with a technical center in Chennai and an international office in Bahrain, the company serves a trusted network of over 500 clients across various manufacturing industries |
|||||
| Ransomware | Indus Protech Solutions id31038 View details | India | Manufacturing / Engineering | — | |
|
Indusprotech.com is a company based in India, operating in the manufacturing and engineering sector. The company likely provides various services and products related to its sector. Indusprotech.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Indus Protech Solutions id31038 View details | India | Manufacturing / Engineering | — | |
|
indusprotech.com zoominfo.com/c/indus-protech-solutions-ltd/1323287130 Indus Protech Solutions is a Chennai-based company specializing in comprehensive bulk MRO (Maintenance, Repair, and Operations) and supply chain services for global trade. Acting as a one-stop sourcing partner, they provide access to over 1.5 million products across 50+ categories, serving diverse sectors like defense, energy, agriculture, and pharmaceuticals. The company connects businesses with global manufacturers, ensuring assured quality, competitive pricing, and streamlined procurement for Fortune 500 companies and large corporate networks |
|||||
| Ransomware | Angel Hotel id31039 View details | United Kingdom | Other | — | |
|
Angelpershore.co.uk is a UK-based entity operating in the other sector. The entity is located in Great Britain and provides various offerings. Angelpershore.co.uk was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Angel Hotel id31039 View details | United Kingdom | Other | — | |
|
angelpershore.co.uk zoominfo.com/c/angel-hotel/1153643926 The Angel, Pershore is a historic Tudor-origin hotel and restaurant located in the heart of the market town of Pershore, Worcestershire, near the River Avon. It serves as a premier venue offering farm-to-table dining with locally sourced produce, comfortable accommodation, and a charming atmosphere. Beyond hospitality, the establishment is a vibrant community hub, regularly hosting live music, festivals, and popular annual events like Bonfire Night fireworks. |
|||||
| Ransomware | The Garfield County Sheriff Office id31040 View details | United States | Law Enforcement / Public Sector | — | |
|
Garcosheriff.com is a website associated with a law enforcement agency in the United States, providing information and services to the public sector. As a public sector entity, it plays a crucial role in maintaining law and order in its jurisdiction. Garcosheriff.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | The Garfield County Sheriff Office id31040 View details | United States | Law Enforcement / Public Sector | — | |
|
garcosheriff.com The Garfield County Sheriff's Office is the primary law enforcement agency serving Garfield County, Colorado. Its mission is to deliver exceptional service and problem-solving solutions to the community through professional, ethical, and compassionate conduct. The office provides comprehensive public safety services, including patrol, detentions, criminal investigations, and community outreach programs like "Shop with a Cop" and emergency mass notifications |
|||||
| Ransomware | Buck Knives id31019 View details | United States | Manufacturing / Engineering | — | |
|
Buckknives.com is a US-based company operating in the manufacturing and engineering sector, producing high-quality knives and outdoor gear. The company is known for its durable and reliable products, catering to various markets, including outdoor enthusiasts and professionals. Buckknives.com was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | Buck Knives id31019 View details | United States | Manufacturing / Engineering | — | |
|
buckknives.com zoominfo.com/c/buck-knives-inc/16223110 Buck Knives is a historic American knife manufacturer founded in 1947 by Hoyt Buck, originating from a family blacksmith business dedicated to superior steel tempering. The brand revolutionized the knife industry in 1964 with the introduction of the iconic Model 110 Folding Hunter. Now headquartered in Post Falls, Idaho, this four-generation family company is renowned for its rugged durability, traditional American craftsmanship, and a lifetime "Forever Warranty" |
|||||
| Ransomware | Advanced Marketing id30859 View details | Mexico | Communication / Marketing | — | |
|
Advmkt.com.mx is a marketing company based in Mexico, operating in the communication and marketing sector. The company likely provides various marketing services to its clients. Advmkt.com.mx was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Advanced Marketing id30859 View details | Mexico | Communication / Marketing | — | |
|
advmkt.com.mx zoominfo.com/c/advanced-marketing/546978407 Advanced Marketing is one of Mexico's largest book distribution and publishing companies, founded in 1994. It partners with around 70 national and international publishing houses to supply major retail chains like Gandhi and Porrúa. Additionally, it operates "AMS Libros," an online store selling a wide variety of children's, art, culture, and health books. |
|||||
| Ransomware | European Design id30780 View details | Canada | Retail / E-commerce | — | |
|
European Design is a Canadian company operating in the retail and e-commerce sector. The company is based in Canada and offers various products and services to its customers. European Design was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | European Design id30780 View details | Canada | Retail / E-commerce | — | |
|
***.ca zoominfo.com/c/european-design/365524802 European Design Jewellery Ltd is a Toronto-based wholesale supplier serving jewellers and manufacturers across Canada. They specialize in providing a wide range of genuine and synthetic gemstones, jewellery findings, diamonds, and finished pieces. Additionally, the company supplies professional jewellery-making equipment and tools, acting as an exclusive Canadian distributor for several industry brands |
|||||
| Ransomware | MK Jewelry id30781 View details | North Macedonia | Retail / E-commerce | — | |
|
mkjewel.com is an e-commerce platform operating in the retail sector, based in the country of MK, offering various products to its customers. As an online retailer, mkjewel.com provides a range of services to facilitate transactions and engage with its customer base. mkjewel.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | MK Jewelry id30781 View details | North Macedonia | Retail / E-commerce | — | |
|
***.com zoominfo.com/c/mk-jewelry-inc/346982894 MK Jewelry, Inc. is a fine jewelry manufacturing and distribution company based in Midtown Manhattan, established in 1986. They specialize in producing and supplying a wide range of jewelry, including bridal and bridge collections. The company serves both independent and major retailers across the US, Canada, and the Caribbean. As a premier industry supplier, they offer extensive private label and branded diamond jewelry lines |
|||||
| Ransomware | GUERREIROS seguros id30782 View details | Portugal | Retail / E-commerce | — | |
|
Guerreiros.pt operates in the retail and e-commerce sector in Portugal, offering various products and services to its customers. As an e-commerce company, it provides online shopping experiences. Guerreiros.pt was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | GUERREIROS seguros id30782 View details | Portugal | Retail / E-commerce | — | |
|
***.pt zoominfo.com/c/guerreiros-seguros/483718773 GUERREIROS Seguros is a professional insurance mediation company based in Faro, Portugal, operating since 1990 and officially licensed as a mediator since 1994. They specialize in a wide range of insurance solutions, including auto, health, and life insurance. With over 30 years of experience, the company focuses on helping clients manage their policies, secure competitive rates, and ensure transparent, up-to-date coverage tailored to their specific needs |
|||||
| Ransomware | Tikona Infinet id30783 View details | India | Telecommunications | — | |
|
Tikona.in is a telecommunications company based in India, offering various services to its customers. The company operates in the telecommunications sector, providing essential services to individuals and businesses across the country. Tikona.in was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Tikona Infinet id30783 View details | India | Telecommunications | — | |
|
***.in rocketreach.co/tikona-profile_b5c0d28cf42e0851 Tikona Infinet Private Limited is a prominent Indian telecommunications company based in Mumbai, established in 2008. They specialize in providing high-performance wireless broadband connectivity and advanced cloud solutions. The company serves a diverse client base, including residential homes, small businesses, and large enterprises across India, with a focus on delivering reliable next-generation internet service |
|||||
| Ransomware | TC Printing id30784 View details | Australia | Manufacturing / Engineering | — | |
|
tcprinting.com.au is an Australian company operating in the manufacturing and engineering sector. The company is based in Australia and provides various services related to printing. tcprinting.com.au was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | TC Printing id30784 View details | Australia | Manufacturing / Engineering | — | |
|
***.com.au zoominfo.com/c/tc-printing/369208765 TC Printing Australia Pty Ltd is a commercial printing and communications company based in Scoresby, Victoria, Melbourne. Established in the mid-1980s, it specializes in a comprehensive range of printing services, including offset, digital, and point-of-sale materials. The company serves diverse clients across the advertising and marketing industries, providing end-to-end solutions from graphic design to large-scale event printing |
|||||
| Ransomware | Oldelval Oleoductos del Valle id30785 View details | Argentina | Energy | — | |
|
Oldelval.com is an Argentine company operating in the energy sector, providing various services to the industry. The company's offerings likely include energy-related solutions, given its sector classification. Oldelval.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Oldelval Oleoductos del Valle id30785 View details | Argentina | Energy | — | |
|
***.com zoominfo.com/c/oleoductos-del-valle-sa/456337922 Oldelval (Oleoductos del Valle S.A.) is a leading Argentine midstream energy company specializing in the transportation of liquid hydrocarbons. Based in Cipolletti, Río Negro, it transports over 50% of the oil produced in Argentina and approximately 80% of the oil from the Neuquén Basin. With over 60 years of history, the company focuses on sustainable operations, safety, and infrastructure maintenance, having recently extended its national concession until 2037. |
|||||
| Ransomware | Decoupe Laser Services id30786 View details | France | Manufacturing / Engineering | — | |
|
Dls-laser.com is a company based in France, operating in the manufacturing and engineering sector. The company likely provides laser-related products or services, given its name. Dls-laser.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Decoupe Laser Services id30786 View details | France | Manufacturing / Engineering | — | |
|
***.com DLS (Découpe Laser Services) is a French laser cutting specialist based in La Ravoire, specializing in precision laser cutting of steel, stainless steel, and aluminum. The company offers comprehensive metal finishing services including deburring, bending, surface treatment, tapping, and milling. With large-format cutting capabilities (6000mm x 2000mm) and over 200 tons of material stock, DLS handles everything from prototypes to very large industrial production runs. They pride themselves on reactivity and flexibility, providing quotes within 24 hours. |
|||||
| Ransomware | Thialf id30787 View details | Netherlands | Construction / Real Estate | — | |
|
Thialf.nl is a company based in the Netherlands, operating in the construction and real estate sector. The company likely provides various services related to construction and real estate development in the region. Thialf.nl was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Thialf id30787 View details | Netherlands | Construction / Real Estate | — | |
|
***.nl zoominfo.com/c/thialf/430686423 Thialf is a world-renowned ice arena located in Heerenveen, Netherlands, often referred to as the "Cathedral of Speed Skating." It serves as the home base for the Dutch national speed skating team and hosts a wide range of ice sports, including long track and short track speed skating, figure skating, and ice hockey. Recently, it was officially confirmed as the long-track speed skating venue for the 2030 Winter Olympics. The facility is celebrated for its modern, sustainable design and its role as a major hub for both elite professional competitions and public recreational skating. |
|||||
| Ransomware | Title Resources id30788 View details | Australia | Finance / Legal / Insurance | — | |
|
titleresourcesnt.com operates within the finance, legal, and insurance sector in Australia, providing various services to clients. As a finance sector entity, titleresourcesnt.com handles sensitive client information. titleresourcesnt.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Title Resources id30788 View details | Australia | Finance / Legal / Insurance | — | |
|
***.com zoominfo.com/c/title-resources-llc/1137777688 Title Resources is a locally owned title company based in Denton, Texas, founded in 1989. They specialize in real estate transactions, comprehensive title searches, and title insurance across North Texas, including Denton, Dallas, and Collin counties. Their team of fully trained professional title officers thoroughly examines each property to identify and resolve any title issues, ensuring secure and smooth real estate closings |
|||||
| Ransomware | Clarke Radiology id30789 View details | Australia | Healthcare / Pharma | — | |
|
Clarkeradiology.com is a healthcare service provider based in Australia, offering medical imaging and radiology services. The company operates in the healthcare sector, providing essential medical services to patients. Clarkeradiology.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Clarke Radiology id30789 View details | Australia | Healthcare / Pharma | — | |
|
***.com zoominfo.com/c/clarke-medical-imaging-center/370367094 Clarke Radiology (Clarke Medical Imaging Center) is a well-established medical imaging facility based in Montreal, Quebec, with over 40 years of experience. They provide a comprehensive range of diagnostic imaging services, including X-rays, MRI, ultrasound, mammography, bone density scans, and cortisone injections. The center is recognized for its top-of-the-line technology, rapid reporting (within 4 hours), and strong commitment to patient safety and accredited care standards |
|||||
| Ransomware | SICSOE id30790 View details | France | IT | — | |
|
Sicsoe.fr is an IT company based in France, providing various services to its clients. The company operates in the IT sector, offering solutions to businesses in France. Sicsoe.fr was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | SICSOE id30790 View details | France | IT | — | |
|
***.fr zoominfo.com/c/sicsoe/359018881 SICSOE (Solution Vin Logistique) is a French wine logistics company based near Bordeaux, established in 1985. They provide comprehensive, customized logistics services for the wine industry, including winery operations, bottling, storage, and shipping. The company is recognized for its advanced technology ensuring full product traceability and its strong commitment to environmental and quality standards, including ISO 14001 certification |
|||||
| Ransomware | Gloria Maris Groupe id30791 View details | France | Other | — | |
|
Gloriamaris.com is a French entity operating in the other sector, providing various offerings. The company is based in France and caters to a specific audience. Gloriamaris.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Gloria Maris Groupe id30791 View details | France | Other | — | |
|
***.com zoominfo.com/c/gloria-maris-groupe/552388964 Gloria Maris is a premium aquaculture company based in France and Sardinia, specializing in the sustainable farming of high-quality fish. With facilities in Corsica, Côte d'Opale, Gravelines, and Sardinia, the company focuses on traceability, environmental respect, and controlled growth in natural marine ecosystems. They produce around 3,800 tons of responsibly farmed fish and 35 million fry annually, exporting their products to over 25 countries worldwide |
|||||
| Ransomware | Compagnie des Caoutchoucs du Pakidie id30792 View details | Other | — | ||
|
Pakidie.com is an entity operating in the other sector. The specifics of its location and offerings are not well-documented. Pakidie.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Compagnie des Caoutchoucs du Pakidie id30792 View details | Other | — | ||
|
***.com Compagnie des Caoutchoucs du Pakidié (CCP) is a pioneering Ivorian company established in 1960, specializing in the farming, production, and processing of natural rubber. Based in Abidjan, Côte d'Ivoire, it holds the historical distinction of being the country's first entirely private rubber enterprise and currently ranks as the second-largest national producer. The company is committed to sustainable practices, exporting its high-quality rubber to major international clients while prioritizing environmental and social responsibility. |
|||||
| Ransomware | Compagnie des Caoutchoucs du Pakidie id30792 View details | Côte d'Ivoire | Other | — | |
|
***.com Compagnie des Caoutchoucs du Pakidié (CCP) is a pioneering Ivorian company established in 1960, specializing in the farming, production, and processing of natural rubber. Based in Abidjan, Côte d'Ivoire, it holds the historical distinction of being the country's first entirely private rubber enterprise and currently ranks as the second-largest national producer. The company is committed to sustainable practices, exporting its high-quality rubber to major international clients while prioritizing environmental and social responsibility. |
|||||
| Ransomware | HBS Group id30793 View details | Australia | Construction / Real Estate | — | |
|
Hbsgroup.com.au is an Australian company operating in the construction and real estate sector, providing various services. The company is based in Australia and offers services related to construction and real estate. Hbsgroup.com.au was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | HBS Group id30793 View details | Australia | Construction / Real Estate | — | |
|
***.com.au zoominfo.com/c/hbs-group-pty-ltd/356757625 HBS Group is a privately owned Australian company specializing in heritage restoration, conservation, and remedial construction projects. Based in Alphington, Victoria, they have over 15 years of experience delivering complex construction and stonemasonry solutions nationwide. The company is recognized as an industry leader in preserving historical buildings and executing high-quality restoration work across major Australian cities |
|||||
| Ransomware | Agapit id30794 View details | Poland | IT | — | |
|
Agapit.pl is an IT company based in Poland, providing various IT services. The company operates in the IT sector, offering its services to clients in Poland. Agapit.pl was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Agapit id30794 View details | Poland | IT | — | |
|
***.pl zoominfo.com/c/agapit-sp-z-oo-spk/372573662 Agapit is one of the largest suppliers of professional cleaning technology and equipment in Poland, with over 26 years of experience. The company provides comprehensive solutions, including industrial cleaning machines, robotic scrubbers, high-pressure washers, and specialized cleaning chemicals. They operate their own nationwide distribution, rental, and service network, with key locations in cities like Olsztyn, Wroclaw, and Gdynia |
|||||
| Ransomware | Raben Group id30795 View details | Poland | Transportation / Travel / Logistics | — | |
|
Raben Group is a European logistics and transportation company based in Poland, offering a range of services including freight forwarding, warehousing, and supply chain management. The company operates in various sectors, providing tailored solutions to its customers. Raben Group was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Raben Group id30795 View details | Poland | Transportation / Travel / Logistics | — | |
|
***.com zoominfo.com/c/raben-group/350966506 Raben Group is a leading European logistics provider with Dutch roots, founded in 1931 and currently headquartered in Poznań, Poland. The company offers comprehensive transport and warehousing solutions, including road transport, contract logistics, and supply chain management across 17 European countries. With over 90 years of experience and a workforce of approximately 12,200 employees, Raben Group is recognized as a market leader focused on sustainable and efficient logistics operations |
|||||
| Ransomware | Henry Frerk Sons id30796 View details | United States | Manufacturing / Engineering | — | |
|
Hfsmaterials.com operates in the manufacturing and engineering sector, providing services and products in the United States. As a company in this sector, it likely offers a range of materials and solutions for various industrial applications. Hfsmaterials.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Henry Frerk Sons id30796 View details | United States | Manufacturing / Engineering | — | |
|
***.com zoominfo.com/c/henry-frerk-sons-inc/44255454 Henry Frerk Sons (HFS Materials) is a premier masonry and plaster restoration supplier based in the Chicago region, with over 140 years of history. They specialize in custom matching and blending of historic mortars, concrete, and stone patching materials, alongside offering on-site volumetric ready-mix concrete services. The company provides a comprehensive range of building materials, including natural hydraulic lime, specialized cleaners, sealers, and preblended mortars for both historic preservation and new construction projects |
|||||
| Ransomware | SMRTR id30797 View details | United States | IT | — | |
|
Smrtrsolutions.com operates in the IT sector in the United States, providing various technology solutions. As an IT company, smrtrsolutions.com likely offers services such as software development, consulting, and support. Smrtrsolutions.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | SMRTR id30797 View details | United States | IT | — | |
|
***.com rocketreach.co/s4i-systems-profile_b5c16403f42e08fa SMRTR is a document and workflow automation company with over 20 years of experience, specializing in ERP-driven industries such as manufacturing, food & beverage, and distribution. They provide cloud-based solutions for document management, accounts payable automation, and supplier regulatory compliance. Operating as a remote-first, environmentally conscious organization, SMRTR focuses on seamless integration with existing financial and operational systems to improve efficiency and reduce manual tasks. |
|||||
| Ransomware | DayNDay id30798 View details | India | Retail / E-commerce | — | |
|
Daynday.co.in is an e-commerce company based in India, operating in the retail sector. The company offers various products and services to its customers. Daynday.co.in was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | DayNDay id30798 View details | India | Retail / E-commerce | — | |
|
***.co.in zoominfo.com/c/daynday/459254692 Day 'N' Day Services Private Limited is a leading integrated facility management company based in Chennai, India, established in 1987. They provide comprehensive facility management and business support services, including logistics, warehouse management, and maintenance solutions. With operations spanning across multiple locations in India and a large workforce, the company serves diverse sectors such as banking, insurance, and corporate enterprises |
|||||
| Ransomware | Affinity Designs id30799 View details | United States | Construction / Real Estate | — | |
|
Affinity Designs LLC is a company operating in the construction and real estate sector in the United States. The company likely provides design services to clients in the construction and real estate industries. Affinity Designs LLC was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Affinity Designs id30799 View details | United States | Construction / Real Estate | — | |
|
***.com zoominfo.com/c/affinity-designs/374939106 Affinity Designs LLC is a fine jewelry wholesaler and manufacturer based in New York, specializing in the design, production, and marketing of elegant gemstone jewelry collections. The company offers a wide range of high-quality pieces crafted in 925 Sterling Silver and 10K, 14K, or 18K gold. Led by CEO Meir Sanandaji, who brings over 40 years of industry experience, the business caters to retailers seeking premium, trend-forward jewelry lines |
|||||
| Ransomware | Lenrose id30800 View details | Singapore | Other | — | |
|
Lenrose.com is a Singapore-based entity operating in the other sector. The company is based in Singapore and provides various offerings. Lenrose.com was listed as a ransomware victim associated with thegentlemen |
|||||
| Ransomware | Lenrose id30800 View details | Singapore | Other | — | |
|
***.com zoominfo.com/c/lenrose-pty-ltd/551499069 Lenrose & Ace David Jewellery is a premier jewellery manufacturing and casting company based in Melbourne, Australia. They specialize in precious metal casting (gold, platinum, silver, and bronze), CAD services, and the production of hand-made chain products. As a full-service, multi-faceted manufacturing facility, they utilize cutting-edge technology to bring custom jewellery designs to life for their clients |
|||||
| Ransomware | Lenrose id30800 View details | Australia | Other | — | |
|
***.com zoominfo.com/c/lenrose-pty-ltd/551499069 Lenrose & Ace David Jewellery is a premier jewellery manufacturing and casting company based in Melbourne, Australia. They specialize in precious metal casting (gold, platinum, silver, and bronze), CAD services, and the production of hand-made chain products. As a full-service, multi-faceted manufacturing facility, they utilize cutting-edge technology to bring custom jewellery designs to life for their clients |
|||||