Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1001 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1001 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-16 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1001 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 8 0.8%
  • Pending 993 99.2%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 2h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 2h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (20)

    Victims (1001)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 301–400 of 1001.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware TopMark Funding id31236 View details United States Finance / Legal / Insurance — pending
    Ransomware Control Concepts Technology id31237 View details United States Manufacturing / Engineering — pending
    Ransomware Philippine Savings Bank id31151 View details Philippines Finance / Legal / Insurance — pending
    Ransomware Las Cenizas id31084 View details Chile Other — pending
    Ransomware Kenaitze Indian Tribe id31085 View details United States NGOs / Associations — pending
    Ransomware Additive Manufacturing id31086 View details United States Manufacturing / Engineering — pending
    Ransomware Salem Saleh Babgi id31087 View details Saudi Arabia Manufacturing / Engineering — pending
    Ransomware Salama Medicals Distributors Private id31088 View details Tanzania, United Republic of Healthcare / Pharma — pending
    Ransomware Krafman id31089 View details Sweden Other — pending
    Ransomware Kosh Innovations id31090 View details IT — pending
    Ransomware Saturn Industries id31091 View details United States Manufacturing / Engineering — pending
    Ransomware Acosta Sons id31092 View details United States Construction / Real Estate — pending
    Ransomware CFS id31093 View details United States Manufacturing / Engineering — pending
    Ransomware OHK Energy id31094 View details Ireland Energy — pending
    Ransomware Hutch Paving id31095 View details United States Construction / Real Estate — pending
    Ransomware CRB group id31096 View details Brazil Manufacturing / Engineering — pending
    Ransomware Partition Specialties id31097 View details United States IT — pending
    Ransomware Preferred id31098 View details United States Retail / E-commerce — pending
    Ransomware Premier Fiduciary id31099 View details United Kingdom Finance / Legal / Insurance — pending
    Ransomware Bater id31100 View details Poland Retail / E-commerce — pending
    Ransomware Precision Concrete Pumping id31101 View details United States Construction / Real Estate — pending
    Ransomware Clear Vision Signs id31102 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Orsima id31103 View details IT — pending
    Ransomware The Municipal Chamber of Serra id31104 View details Brazil Public Sector — pending
    Ransomware Efrata College of Education id31105 View details Israel Healthcare / Pharma — pending
    Ransomware Amicell id31106 View details Israel IT — pending
    Ransomware Paula Fish id31107 View details Poland Retail / E-commerce — pending
    Ransomware Known id31108 View details Iceland IT — pending
    Ransomware Peachtree Group id31109 View details United States Finance / Legal / Insurance — pending
    Ransomware Municipalidad de San Luis id31110 View details Peru Public Sector — pending
    Ransomware World Wide Fittings id31111 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Chemco Systems id31112 View details United States IT — pending
    Ransomware Total Auto Business Solutions id31113 View details United States IT — pending
    Ransomware Okovolt Solartechnik id31114 View details Germany Energy — pending
    Ransomware Pertamina id31115 View details Indonesia Energy — leaked
    Ransomware Promatrix id31032 View details United States IT — pending
    Ransomware Malaysian Nuclear Agency id31033 View details Malaysia Public Sector — pending
    Ransomware Delkart Industries Pvt id31034 View details India Manufacturing / Engineering — pending
    Ransomware ETA Technology Pvt id31035 View details India IT — pending
    Ransomware Kontact Consortium India Pvt id31036 View details India IT — pending
    Ransomware Upanal CNC Solutions id31037 View details Peru Manufacturing / Engineering — pending
    Ransomware Indus Protech Solutions id31038 View details India Manufacturing / Engineering — pending
    Ransomware Angel Hotel id31039 View details United Kingdom Other — pending
    Ransomware The Garfield County Sheriff Office id31040 View details United States Law Enforcement / Public Sector — pending
    Ransomware Buck Knives id31019 View details United States Manufacturing / Engineering — pending
    Ransomware Advanced Marketing id30859 View details Mexico Communication / Marketing — pending
    Ransomware European Design id30780 View details Canada Retail / E-commerce — pending
    Ransomware MK Jewelry id30781 View details North Macedonia Retail / E-commerce — pending
    Ransomware GUERREIROS seguros id30782 View details Portugal Retail / E-commerce — pending
    Ransomware Tikona Infinet id30783 View details India Telecommunications — pending
    Ransomware TC Printing id30784 View details Australia Manufacturing / Engineering — pending
    Ransomware Oldelval Oleoductos del Valle id30785 View details Argentina Energy — pending
    Ransomware Decoupe Laser Services id30786 View details France Manufacturing / Engineering — pending
    Ransomware Thialf id30787 View details Netherlands Construction / Real Estate — pending
    Ransomware Title Resources id30788 View details Australia Finance / Legal / Insurance — pending
    Ransomware Clarke Radiology id30789 View details Australia Healthcare / Pharma — pending
    Ransomware SICSOE id30790 View details France IT — pending
    Ransomware Gloria Maris Groupe id30791 View details France Other — pending
    Ransomware Compagnie des Caoutchoucs du Pakidie id30792 View details Côte d'Ivoire Other — pending
    Ransomware HBS Group id30793 View details Australia Construction / Real Estate — pending
    Ransomware Agapit id30794 View details Poland IT — pending
    Ransomware Raben Group id30795 View details Poland Transportation / Travel / Logistics — pending
    Ransomware Henry Frerk Sons id30796 View details United States Manufacturing / Engineering — pending
    Ransomware SMRTR id30797 View details United States IT — pending
    Ransomware DayNDay id30798 View details India Retail / E-commerce — pending
    Ransomware Affinity Designs id30799 View details United States Construction / Real Estate — pending
    Ransomware Lenrose id30800 View details Australia Other — pending
    Ransomware Velum id30801 View details IT — pending
    Ransomware Ceska filharmonie id30802 View details Czechia Services — pending
    Ransomware Herbahaz id30803 View details Hungary Agriculture / Food — pending
    Ransomware vpcgroup.com customfoam.com id30804 View details United States Manufacturing / Engineering — pending
    Ransomware Optiforms id30805 View details United States IT — pending
    Ransomware MatTek id30806 View details United States IT — pending
    Ransomware Conecsus id30807 View details United States IT — pending
    Ransomware Wunschkind Klinik Dr Brunbauer id30808 View details Austria Healthcare / Pharma — pending
    Ransomware Sirl id30764 View details Portugal IT — pending
    Ransomware Disney Family id30765 View details United States Finance / Legal / Insurance — pending
    Ransomware Ecopetrol id30672 View details Colombia Energy — leaked
    Ransomware Military Sealift Command id30646 View details United States Transportation / Travel / Logistics — pending
    Ransomware Advantage Home Health Care id30647 View details United States Healthcare / Pharma — pending
    Ransomware Sunway Scientific id30648 View details Taiwan, Province of China Manufacturing / Engineering — pending
    Ransomware Tangram Interiors id30614 View details United States Construction / Real Estate — pending
    Ransomware BRAC id30615 View details Bangladesh NGOs / Associations — pending
    Ransomware Customs Watch id30616 View details United States Retail / E-commerce — pending
    Ransomware Gallant id30617 View details Finland IT — pending
    Ransomware Hanseata id30618 View details Germany Finance / Legal / Insurance — pending
    Ransomware Metro Mondego id30595 View details Portugal Transportation / Travel / Logistics — pending
    Ransomware Comet Enterprise Corp id30596 View details Taiwan, Province of China Manufacturing / Engineering — pending
    Ransomware Landesbibliothek Coburg id30597 View details Germany Education — pending
    Ransomware ALUFE Femszerkezeti Kft id30598 View details Hungary Manufacturing / Engineering — pending
    Ransomware Tooltec id30599 View details Sweden Manufacturing / Engineering — pending
    Ransomware Terra Vitis id30600 View details France Agriculture / Food — pending
    Ransomware Vignobles Toutigeac id30601 View details France Other — pending
    Ransomware Dink Co Ltd id30602 View details Japan IT — pending
    Ransomware Lsn id30604 View details Poland IT — pending
    Ransomware Giraudi Group id30605 View details Italy — — pending
    Ransomware Mesto Celakovice id30606 View details Czechia — — pending
    Ransomware Kaneko id30607 View details Japan Manufacturing / Engineering — pending
    Ransomware Byggelit Sverige id30608 View details Sweden — — pending
    Ransomware Terry P Moosmann CPA PC id30609 View details United States — — pending