Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1001 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1001 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-16 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1001 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 8 0.8%
  • Pending 993 99.2%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 2h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 2h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (20)

    Victims (1001)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 401–500 of 1001.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Royal Foods id30475 View details Australia Hospitality / Food & Beverage / Tourism — pending
    Ransomware Ferretería Scopazzo id30476 View details Argentina Retail / E-commerce — pending
    Ransomware Fortray id30477 View details IT — pending
    Ransomware Martin Cava id30478 View details Spain Other — pending
    Ransomware Aveiro Constructors Limited id30479 View details Portugal Construction / Real Estate — pending
    Ransomware Triquesta id30480 View details Mexico IT — pending
    Ransomware Vicenzi Group id30481 View details Italy Agriculture / Food — pending
    Ransomware Energon id30482 View details Czechia Energy — pending
    Ransomware Open Options id30483 View details Ireland IT — pending
    Ransomware INTERNET AG id30484 View details Germany IT — pending
    Ransomware Crossroads Medical Management id30485 View details United States Healthcare / Pharma — pending
    Ransomware Pharma Wholesale id30486 View details United States Healthcare / Pharma — pending
    Ransomware Welders Supply Equipment Rentals id30487 View details United States Construction / Real Estate — pending
    Ransomware VASBE id30488 View details Russian Federation IT — pending
    Ransomware Gene Codes Forensics id30489 View details United States Healthcare / Pharma — pending
    Ransomware Lopes Law id30490 View details United States Finance / Legal / Insurance — pending
    Ransomware Carita id30491 View details France Retail / E-commerce — pending
    Ransomware BDO Greece id30492 View details Greece Finance / Legal / Insurance — pending
    Ransomware Dash Door Glass id30493 View details United States IT — pending
    Ransomware Shamrock Holdings Inc. id30327 View details United States IT — pending
    Ransomware Medic Rescue id30328 View details United States NGOs / Associations — pending
    Ransomware LogiQuip id30329 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Virginia Historical Society id30330 View details United States NGOs / Associations — pending
    Ransomware Quanterm Logistics Sdn Bhd id30331 View details Malaysia IT — pending
    Ransomware Spedidam id30332 View details France Services — pending
    Ransomware hiddeenn id30333 View details Other — pending
    Ransomware Arabia Falcon Insurance Company SAOG id30334 View details Oman Finance / Legal / Insurance — pending
    Ransomware Ce Ratp Comite D entreprise Ratp id30335 View details France Other — pending
    Ransomware Keifert id30336 View details Germany Manufacturing / Engineering — pending
    Ransomware Kosmos id30337 View details Germany IT — pending
    Ransomware EBNY Development id30338 View details Egypt Retail / E-commerce — pending
    Ransomware Tonnies Group id30339 View details Germany Agriculture / Food — pending
    Ransomware Automovil Supply S.A id30340 View details Paraguay Retail / E-commerce — pending
    Ransomware Excel Cell Electronic id30341 View details Taiwan, Province of China Manufacturing / Engineering — pending
    Ransomware Mercado Libre id30342 View details Argentina Retail / E-commerce — pending
    Ransomware CSIR Structural Engineering Research Centre id30343 View details India Research — pending
    Ransomware Jump Solutions Inc id30344 View details Philippines IT — pending
    Ransomware MBT Energy id30345 View details Germany Energy — pending
    Ransomware Pro-Tech Technology id30347 View details Hong Kong Energy — pending
    Ransomware Technical Solutions Group id30348 View details United States IT — pending
    Ransomware Keywest Projects id30178 View details Canada Construction / Real Estate — pending
    Ransomware International Freight Services id30179 View details United States IT — pending
    Ransomware Royal Thai Navy Housing Cooperative id30180 View details Thailand Other — pending
    Ransomware CTM India Limited motherson INDIA id30181 View details India Finance / Legal / Insurance — pending
    Ransomware Hooke Laboratories id30182 View details United States IT — pending
    Ransomware GIA Partners id30183 View details United States IT — pending
    Ransomware Rowley Properties id30184 View details United Kingdom Construction / Real Estate — pending
    Ransomware Canada Wide Media id30185 View details Canada Finance / Legal / Insurance — pending
    Ransomware ErgoMed id30186 View details United Kingdom Healthcare / Pharma — pending
    Ransomware MBO GmbH id30187 View details Germany Manufacturing / Engineering — pending
    Ransomware Meccanica Gn id30188 View details Italy Manufacturing / Engineering — pending
    Ransomware Al Dhow Group id30189 View details United Arab Emirates Transportation / Travel / Logistics — pending
    Ransomware Beran Concrete id30190 View details Czechia Construction / Real Estate — pending
    Ransomware BDS CZ id30191 View details Czechia Finance / Legal / Insurance — pending
    Ransomware Stadttheater Giessen id30192 View details Germany Hospitality / Food & Beverage / Tourism — pending
    Ransomware Gegenbauer Elektrotechnik id30193 View details Austria IT — pending
    Ransomware Bell Hardware id30194 View details United States Retail / E-commerce — pending
    Ransomware CHIFENG GOLD SEPON id30195 View details Lao People's Democratic Republic IT — pending
    Ransomware Natren id30196 View details United States Healthcare / Pharma — pending
    Ransomware Au Vieux Campeur id30197 View details France Retail / E-commerce — pending
    Ransomware Ayres Carr & Sullivan, P.C. id30198 View details United States IT — pending
    Ransomware Immling id30199 View details Germany Retail / E-commerce — pending
    Ransomware DHC Corporation id30200 View details Japan Retail / E-commerce — pending
    Ransomware Steegaa Interior id30201 View details United Arab Emirates Other — pending
    Ransomware Indra Group id30202 View details Spain IT — pending
    Ransomware Climax Technology id30203 View details Taiwan, Province of China Manufacturing / Engineering — pending
    Ransomware Centre Ophtalmologique dErmont id30204 View details France Healthcare / Pharma — pending
    Ransomware Comp Trading Co id30205 View details Thailand — — pending
    Ransomware Mondottica id30206 View details Italy — — pending
    Ransomware OSP HOLDING FRANCE id30207 View details France — — pending
    Ransomware NATURGHIACCIO id30208 View details Italy — — pending
    Ransomware MakoLab id30209 View details Poland — — pending
    Ransomware EMAS Group id30210 View details Czechia — — pending
    Ransomware The City of Boyne City id30211 View details United States — — pending
    Ransomware Oron Law Firm id30212 View details Switzerland — — pending
    Ransomware Wacha Justen id30213 View details Nicaragua — — pending
    Ransomware CUI Agency id30214 View details United States — — pending
    Ransomware Melcor Developments Ltd id30215 View details Canada — — pending
    Ransomware FAC Logistique id30216 View details France — — pending
    Ransomware SDEZ id30217 View details France — — pending
    Ransomware Pou Sheng International id30218 View details Taiwan, Province of China — — pending
    Ransomware Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik id30055 View details Germany IT — pending
    Ransomware hiddenn id30042 View details — — leaked
    Ransomware Vera Chimie Management id30043 View details France — — pending
    Ransomware Alexander Buch Bilanzbuchhalter id30044 View details Germany — — pending
    Ransomware SGS Malaysia id30045 View details Malaysia — — pending
    Ransomware TERRIO Therapy Fitness id30046 View details Mexico — — pending
    Ransomware Ty Thac Co id30047 View details Viet Nam Healthcare / Pharma — pending
    Ransomware Amigest id30048 View details France — — pending
    Ransomware Yudu Technology id30049 View details Singapore — — pending
    Ransomware Burris MacOmber id30050 View details United States — — leaked
    Ransomware Sertrans id30051 View details Spain — — pending
    Ransomware Cofaq id30052 View details France — — pending
    Ransomware Al Khaja Holding id30053 View details United Arab Emirates — — pending
    Ransomware Athens Orthopedic Clinic id30055 View details United States — — pending
    Ransomware Enciso Ltda id29870 View details Chile Other — pending
    Ransomware South Texas Spinal Clinic id29871 View details United States Healthcare / Pharma — pending
    Ransomware Mahajak Development id29872 View details Thailand Manufacturing / Engineering — pending
    Ransomware Calipage Humblet id29873 View details Belgium IT — pending
    Ransomware Ministarstvo zdravstva Republike Hrvatske id29874 View details Croatia Public Sector — pending