Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1040 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1040 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-08-31 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1040 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 2 Onion service Down checked 14m ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion
    Leak location 1 Onion service Down checked 14m ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors (20)

    Victims (1040)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 301–400 of 1040.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Velum id30801 View details IT
    Ransomware Velum id30801 View details IT
    Ransomware Ceska filharmonie id30802 View details Czechia Services
    Ransomware Ceska filharmonie id30802 View details Czechia Services
    Ransomware Herbahaz id30803 View details Hungary Agriculture / Food
    Ransomware Herbahaz id30803 View details Hungary Agriculture / Food
    Ransomware vpcgroup.com customfoam.com id30804 View details United States Manufacturing / Engineering
    Ransomware vpcgroup.com customfoam.com id30804 View details United States Manufacturing / Engineering
    Ransomware Optiforms id30805 View details United States IT
    Ransomware Optiforms id30805 View details United States IT
    Ransomware MatTek id30806 View details United States IT
    Ransomware MatTek id30806 View details United States IT
    Ransomware Conecsus id30807 View details United States IT
    Ransomware Conecsus id30807 View details United States IT
    Ransomware Wunschkind Klinik Dr Brunbauer id30808 View details Austria Healthcare / Pharma
    Ransomware Wunschkind Klinik Dr Brunbauer id30808 View details Austria Healthcare / Pharma
    Ransomware Sirl id30764 View details Portugal IT
    Ransomware Sirl id30764 View details Portugal IT
    Ransomware Disney Family id30765 View details United States Finance / Legal / Insurance
    Ransomware Disney Family id30765 View details United States Finance / Legal / Insurance
    Ransomware Ecopetrol id30672 View details Colombia Energy
    Ransomware Ecopetrol id30672 View details Colombia Energy
    Ransomware Military Sealift Command id30646 View details United States Transportation / Travel / Logistics
    Ransomware Military Sealift Command id30646 View details United States Transportation / Travel / Logistics
    Ransomware Advantage Home Health Care id30647 View details United States Healthcare / Pharma
    Ransomware Advantage Home Health Care id30647 View details United States Healthcare / Pharma
    Ransomware Sunway Scientific id30648 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Sunway Scientific id30648 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Tangram Interiors id30614 View details United Kingdom Construction / Real Estate
    Ransomware Tangram Interiors id30614 View details United Kingdom Construction / Real Estate
    Ransomware Tangram Interiors id30614 View details United States Construction / Real Estate
    Ransomware BRAC id30615 View details Bangladesh NGOs / Associations
    Ransomware BRAC id30615 View details Bangladesh NGOs / Associations
    Ransomware Customs Watch id30616 View details United States Retail / E-commerce
    Ransomware Customs Watch id30616 View details United States Retail / E-commerce
    Ransomware Gallant id30617 View details Finland IT
    Ransomware Gallant id30617 View details Finland IT
    Ransomware Hanseata id30618 View details Germany Finance / Legal / Insurance
    Ransomware Hanseata id30618 View details Germany Finance / Legal / Insurance
    Ransomware Metro Mondego id30595 View details Portugal Transportation / Travel / Logistics
    Ransomware Metro Mondego id30595 View details Portugal Transportation / Travel / Logistics
    Ransomware Comet Enterprise Corp id30596 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Comet Enterprise Corp id30596 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Landesbibliothek Coburg id30597 View details Germany Education
    Ransomware Landesbibliothek Coburg id30597 View details Germany Education
    Ransomware ALUFE Femszerkezeti Kft id30598 View details Hungary Manufacturing / Engineering
    Ransomware ALUFE Femszerkezeti Kft id30598 View details Hungary Manufacturing / Engineering
    Ransomware Tooltec id30599 View details Sweden Manufacturing / Engineering
    Ransomware Tooltec id30599 View details Sweden Manufacturing / Engineering
    Ransomware Terra Vitis id30600 View details France Agriculture / Food
    Ransomware Terra Vitis id30600 View details France Agriculture / Food
    Ransomware Vignobles Toutigeac id30601 View details France Other
    Ransomware Vignobles Toutigeac id30601 View details France Other
    Ransomware Dink Co Ltd id30602 View details Japan IT
    Ransomware Dink Co Ltd id30602 View details Japan IT
    Ransomware Lsn id30604 View details IT
    Ransomware Lsn id30604 View details IT
    Ransomware Lsn id30604 View details Poland IT
    Ransomware Giraudi Group id30605 View details Italy
    Ransomware Giraudi Group id30605 View details Italy
    Ransomware Mesto Celakovice id30606 View details Czechia
    Ransomware Mesto Celakovice id30606 View details Czechia
    Ransomware Kaneko id30607 View details Japan Manufacturing / Engineering
    Ransomware Kaneko id30607 View details Japan Manufacturing / Engineering
    Ransomware Byggelit Sverige id30608 View details Sweden
    Ransomware Byggelit Sverige id30608 View details Sweden
    Ransomware Terry P Moosmann CPA PC id30609 View details United States
    Ransomware Terry P Moosmann CPA PC id30609 View details United States
    Ransomware Royal Foods id30475 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Royal Foods id30475 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Ferretería Scopazzo id30476 View details Argentina Retail / E-commerce
    Ransomware Ferretería Scopazzo id30476 View details Argentina Retail / E-commerce
    Ransomware Fortray id30477 View details IT
    Ransomware Fortray id30477 View details IT
    Ransomware Martin Cava id30478 View details Spain Other
    Ransomware Martin Cava id30478 View details Spain Other
    Ransomware Aveiro Constructors Limited id30479 View details Portugal Construction / Real Estate
    Ransomware Aveiro Constructors Limited id30479 View details Portugal Construction / Real Estate
    Ransomware Triquesta id30480 View details Mexico IT
    Ransomware Triquesta id30480 View details Mexico IT
    Ransomware Vicenzi Group id30481 View details Italy Agriculture / Food
    Ransomware Vicenzi Group id30481 View details Italy Agriculture / Food
    Ransomware Energon id30482 View details Czechia Energy
    Ransomware Energon id30482 View details Czechia Energy
    Ransomware Open Options id30483 View details Ireland IT
    Ransomware Open Options id30483 View details Ireland IT
    Ransomware INTERNET AG id30484 View details Germany IT
    Ransomware INTERNET AG id30484 View details Germany IT
    Ransomware Crossroads Medical Management id30485 View details United States Healthcare / Pharma
    Ransomware Crossroads Medical Management id30485 View details United States Healthcare / Pharma
    Ransomware Pharma Wholesale id30486 View details Healthcare / Pharma
    Ransomware Pharma Wholesale id30486 View details Healthcare / Pharma
    Ransomware Pharma Wholesale id30486 View details United States Healthcare / Pharma
    Ransomware Welders Supply Equipment Rentals id30487 View details United States Construction / Real Estate
    Ransomware Welders Supply Equipment Rentals id30487 View details United States Construction / Real Estate
    Ransomware VASBE id30488 View details Russian Federation IT
    Ransomware VASBE id30488 View details Russian Federation IT
    Ransomware Gene Codes Forensics id30489 View details United States Healthcare / Pharma
    Ransomware Gene Codes Forensics id30489 View details United States Healthcare / Pharma
    Ransomware Lopes Law id30490 View details United States Finance / Legal / Insurance