Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1040 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1040 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-08-31 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1040 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 2 Onion service Down checked 2h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion
    Leak location 1 Onion service Down checked 2h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors (20)

    Victims (1040)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 501–600 of 1040.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Climax Technology id30203 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Climax Technology id30203 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Centre Ophtalmologique dErmont id30204 View details France Healthcare / Pharma
    Ransomware Centre Ophtalmologique dErmont id30204 View details France Healthcare / Pharma
    Ransomware Comp Trading Co id30205 View details Thailand
    Ransomware Mondottica id30206 View details Italy
    Ransomware OSP HOLDING FRANCE id30207 View details France
    Ransomware NATURGHIACCIO id30208 View details Italy
    Ransomware MakoLab id30209 View details Poland
    Ransomware EMAS Group id30210 View details Czechia
    Ransomware The City of Boyne City id30211 View details United States
    Ransomware Oron Law Firm id30212 View details Switzerland
    Ransomware Oron Law Firm id30212 View details Switzerland
    Ransomware Wacha Justen id30213 View details Nicaragua
    Ransomware CUI Agency id30214 View details United States
    Ransomware Melcor Developments Ltd id30215 View details Canada
    Ransomware FAC Logistique id30216 View details France
    Ransomware SDEZ id30217 View details France
    Ransomware Pou Sheng International id30218 View details Taiwan, Province of China
    Ransomware Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik id30055 View details Germany IT
    Ransomware Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik id30055 View details Germany IT
    Ransomware hiddenn id30042 View details
    Ransomware Vera Chimie Management id30043 View details France
    Ransomware Alexander Buch Bilanzbuchhalter id30044 View details Germany
    Ransomware SGS Malaysia id30045 View details Malaysia
    Ransomware TERRIO Therapy Fitness id30046 View details Mexico
    Ransomware Ty Thac Co id30047 View details Viet Nam Healthcare / Pharma
    Ransomware Amigest id30048 View details France
    Ransomware Yudu Technology id30049 View details Singapore
    Ransomware Burris MacOmber id30050 View details United States
    Ransomware Sertrans id30051 View details Spain
    Ransomware Cofaq id30052 View details France
    Ransomware Al Khaja Holding id30053 View details United Arab Emirates
    Ransomware Athens Orthopedic Clinic id30055 View details United States
    Ransomware Enciso Ltda id29870 View details Chile Other
    Ransomware South Texas Spinal Clinic id29871 View details United States Healthcare / Pharma
    Ransomware Mahajak Development id29872 View details Thailand Manufacturing / Engineering
    Ransomware Calipage Humblet id29873 View details Belgium IT
    Ransomware Ministarstvo zdravstva Republike Hrvatske id29874 View details Croatia Public Sector
    Ransomware Palmer Sicard id29875 View details Finance / Legal / Insurance
    Ransomware Linnecken Partner id29876 View details Germany Finance / Legal / Insurance
    Ransomware Centre Medical Crowley id29877 View details Canada Healthcare / Pharma
    Ransomware Executive Coach id29878 View details United States Services
    Ransomware Mackay Sugar id29879 View details Australia Agriculture / Food
    Ransomware SigmaControl id29880 View details Netherlands Manufacturing / Engineering
    Ransomware Buratti id29881 View details Italy Manufacturing / Engineering
    Ransomware National Museum id29882 View details Denmark Public Sector
    Ransomware Times Software id29883 View details Singapore IT
    Ransomware Traublinger id29884 View details Germany Manufacturing / Engineering
    Ransomware Fecovita id29885 View details Argentina Healthcare / Pharma
    Ransomware Constructions Piraino id29886 View details France Other
    Ransomware Kozminski University id29887 View details Poland Education
    Ransomware Cole Manufacturing id29888 View details United States Manufacturing / Engineering
    Ransomware Maine Oxy id29889 View details United States IT
    Ransomware Buechel Stone id29890 View details United States Construction / Real Estate
    Ransomware UiTM Holdings id29795 View details Malaysia Finance / Legal / Insurance
    Ransomware Scenic Hudson id29796 View details United States NGOs / Associations
    Ransomware Silmquinas e Equipamentos id29797 View details Brazil Manufacturing / Engineering
    Ransomware Tokabei Japan id29798 View details Japan Other
    Ransomware Allensbach Volunteer id29799 View details Germany NGOs / Associations
    Ransomware IP Rings id29667 View details Ireland IT
    Ransomware Central Arkansas Pediatrics id29668 View details United States Healthcare / Pharma
    Ransomware Metroply id29669 View details Construction / Real Estate
    Ransomware Tress id29670 View details United States Retail / E-commerce
    Ransomware Institucion Cervantes id29671 View details Argentina Education
    Ransomware Empty id29672 View details Spain Other
    Ransomware Jyharn Electronic id29673 View details Taiwan, Province of China IT
    Ransomware Trigon America id29674 View details United States Manufacturing / Engineering
    Ransomware FESCO Adecco id29675 View details Russian Federation Transportation / Travel / Logistics
    Ransomware The Clinic id29676 View details United Kingdom Healthcare / Pharma
    Ransomware Integrated Distribution id29677 View details United Kingdom IT
    Ransomware Yao Yuan Technology id29678 View details Taiwan, Province of China Retail / E-commerce
    Ransomware Goldlion id29679 View details Hong Kong Manufacturing / Engineering
    Ransomware Danzo Group id29680 View details Japan Transportation / Travel / Logistics
    Ransomware WCM Remedium id29681 View details Poland Healthcare / Pharma
    Ransomware M Rocha J Serra Lda id29600 View details Portugal IT
    Ransomware Anandji Haridas id29601 View details India Construction / Real Estate
    Ransomware Arabian Procession Holding id29602 View details Saudi Arabia Energy
    Ransomware Smile Siam Printing Service id29603 View details Thailand Hospitality / Food & Beverage / Tourism
    Ransomware Fibrenoire id29604 View details Canada Telecommunications
    Ransomware Brian Jessel BMW id29605 View details United States Retail / E-commerce
    Ransomware Harrell Martin Peace id29606 View details United States Finance / Legal / Insurance
    Ransomware Computime Group id29607 View details Hong Kong Manufacturing / Engineering
    Ransomware Bouri Group id29608 View details Tunisia IT
    Ransomware National Industries id29609 View details India Manufacturing / Engineering
    Ransomware Soniva Dental id29610 View details Pakistan Healthcare / Pharma
    Ransomware Suburban Water id29611 View details United States Energy
    Ransomware Downriver Medical Associates id29612 View details United States Healthcare / Pharma
    Ransomware Soja de Portugal id29613 View details Portugal IT
    Ransomware TeLoh id29614 View details Germany IT
    Ransomware Liztex Guatemala id29615 View details Guatemala Retail / E-commerce
    Ransomware 3E Accounting id29616 View details Singapore Finance / Legal / Insurance
    Ransomware Kunal Enterprises id29617 View details India Manufacturing / Engineering
    Ransomware Edgewood Surgical Hospital id29618 View details United States Healthcare / Pharma
    Ransomware Thoresen Thai Agencies id29619 View details Thailand Transportation / Travel / Logistics
    Ransomware Michigan Surgical Center id29620 View details United States Healthcare / Pharma
    Ransomware Mayelia Automotive id29413 View details Mexico Manufacturing / Engineering
    Ransomware Techmar id29414 View details United Kingdom Services
    Ransomware Grupo Premier id29415 View details Mexico Agriculture / Food
    Ransomware Fonderia Corra id29416 View details Italy Manufacturing / Engineering