Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1001 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1001 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-16 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 203 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Breach House as a ransomware group with 1001 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 8 0.8%
  • Pending 993 99.2%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 2h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 2h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (20)

    Victims (1001)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 501–600 of 1001.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Palmer Sicard id29875 View details Finance / Legal / Insurance — pending
    Ransomware Linnecken Partner id29876 View details Germany Finance / Legal / Insurance — pending
    Ransomware Centre Medical Crowley id29877 View details Canada Healthcare / Pharma — pending
    Ransomware Executive Coach id29878 View details United States Services — pending
    Ransomware Mackay Sugar id29879 View details Australia Agriculture / Food — pending
    Ransomware SigmaControl id29880 View details Netherlands Manufacturing / Engineering — pending
    Ransomware Buratti id29881 View details Italy Manufacturing / Engineering — pending
    Ransomware National Museum id29882 View details Denmark Public Sector — pending
    Ransomware Times Software id29883 View details Singapore IT — pending
    Ransomware Traublinger id29884 View details Germany Manufacturing / Engineering — pending
    Ransomware Fecovita id29885 View details Argentina Healthcare / Pharma — pending
    Ransomware Constructions Piraino id29886 View details France Other — pending
    Ransomware Kozminski University id29887 View details Poland Education — pending
    Ransomware Cole Manufacturing id29888 View details United States Manufacturing / Engineering — pending
    Ransomware Maine Oxy id29889 View details United States IT — pending
    Ransomware Buechel Stone id29890 View details United States Construction / Real Estate — pending
    Ransomware UiTM Holdings id29795 View details Malaysia Finance / Legal / Insurance — pending
    Ransomware Scenic Hudson id29796 View details United States NGOs / Associations — pending
    Ransomware Silmquinas e Equipamentos id29797 View details Brazil Manufacturing / Engineering — pending
    Ransomware Tokabei Japan id29798 View details Japan Other — pending
    Ransomware Allensbach Volunteer id29799 View details Germany NGOs / Associations — pending
    Ransomware IP Rings id29667 View details Ireland IT — pending
    Ransomware Central Arkansas Pediatrics id29668 View details United States Healthcare / Pharma — pending
    Ransomware Metroply id29669 View details Construction / Real Estate — pending
    Ransomware Tress id29670 View details United States Retail / E-commerce — pending
    Ransomware Institucion Cervantes id29671 View details Argentina Education — pending
    Ransomware Empty id29672 View details Spain Other — pending
    Ransomware Jyharn Electronic id29673 View details Taiwan, Province of China IT — pending
    Ransomware Trigon America id29674 View details United States Manufacturing / Engineering — pending
    Ransomware FESCO Adecco id29675 View details Russian Federation Transportation / Travel / Logistics — pending
    Ransomware The Clinic id29676 View details United Kingdom Healthcare / Pharma — pending
    Ransomware Integrated Distribution id29677 View details United Kingdom IT — pending
    Ransomware Yao Yuan Technology id29678 View details Taiwan, Province of China Retail / E-commerce — pending
    Ransomware Goldlion id29679 View details Hong Kong Manufacturing / Engineering — pending
    Ransomware Danzo Group id29680 View details Japan Transportation / Travel / Logistics — pending
    Ransomware WCM Remedium id29681 View details Poland Healthcare / Pharma — pending
    Ransomware M Rocha J Serra Lda id29600 View details Portugal IT — pending
    Ransomware Anandji Haridas id29601 View details India Construction / Real Estate — pending
    Ransomware Arabian Procession Holding id29602 View details Saudi Arabia Energy — pending
    Ransomware Smile Siam Printing Service id29603 View details Thailand Hospitality / Food & Beverage / Tourism — pending
    Ransomware Fibrenoire id29604 View details Canada Telecommunications — pending
    Ransomware Brian Jessel BMW id29605 View details United States Retail / E-commerce — pending
    Ransomware Harrell Martin Peace id29606 View details United States Finance / Legal / Insurance — pending
    Ransomware Computime Group id29607 View details Hong Kong Manufacturing / Engineering — pending
    Ransomware Bouri Group id29608 View details Tunisia IT — pending
    Ransomware National Industries id29609 View details India Manufacturing / Engineering — pending
    Ransomware Soniva Dental id29610 View details Pakistan Healthcare / Pharma — pending
    Ransomware Suburban Water id29611 View details United States Energy — pending
    Ransomware Downriver Medical Associates id29612 View details United States Healthcare / Pharma — pending
    Ransomware Soja de Portugal id29613 View details Portugal IT — pending
    Ransomware TeLoh id29614 View details Germany IT — pending
    Ransomware Liztex Guatemala id29615 View details Guatemala Retail / E-commerce — pending
    Ransomware 3E Accounting id29616 View details Singapore Finance / Legal / Insurance — pending
    Ransomware Kunal Enterprises id29617 View details India Manufacturing / Engineering — pending
    Ransomware Edgewood Surgical Hospital id29618 View details United States Healthcare / Pharma — pending
    Ransomware Thoresen Thai Agencies id29619 View details Thailand Transportation / Travel / Logistics — pending
    Ransomware Michigan Surgical Center id29620 View details United States Healthcare / Pharma — pending
    Ransomware Mayelia Automotive id29413 View details Mexico Manufacturing / Engineering — pending
    Ransomware Techmar id29414 View details United Kingdom Services — pending
    Ransomware Grupo Premier id29415 View details Mexico Agriculture / Food — pending
    Ransomware Fonderia Corra id29416 View details Italy Manufacturing / Engineering — pending
    Ransomware Heartland Growers id29417 View details United States Retail / E-commerce — pending
    Ransomware Corporacion Prokompra id29418 View details Venezuela, Bolivarian Republic of Manufacturing / Engineering — pending
    Ransomware Seeley Office Systems id29339 View details Australia Services — pending
    Ransomware Le Perreux sur Marne id29340 View details France Public Sector — pending
    Ransomware Sanatorio Delta id29341 View details Argentina Healthcare / Pharma — pending
    Ransomware Hussey Seatway id29342 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Caka Grup Lojistik id29343 View details Türkiye Manufacturing / Engineering — pending
    Ransomware TRANSSYSTEM Group id29344 View details Poland Manufacturing / Engineering — pending
    Ransomware ACAM Systemautomation id29345 View details Austria Manufacturing / Engineering — pending
    Ransomware Koa Glass id29346 View details Japan Healthcare / Pharma — pending
    Ransomware Openmind Networks id29347 View details Telecommunications — pending
    Ransomware Grupo Pasquel id29296 View details Ecuador Construction / Real Estate — pending
    Ransomware MBM Corp id29297 View details United States Services — pending
    Ransomware YMCA of Columbia id29298 View details United States NGOs / Associations — pending
    Ransomware Internal Medicine id29238 View details United States Healthcare / Pharma — pending
    Ransomware Polyrack id29239 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Internet Technologies Designs id29240 View details France Telecommunications — pending
    Ransomware E-Control Systems id29241 View details Austria Healthcare / Pharma — pending
    Ransomware DEVO-Tech id29242 View details Switzerland Construction / Real Estate — pending
    Ransomware Modern Display id29243 View details United States Retail / E-commerce — pending
    Ransomware University of Finance and Administration id29244 View details Czechia Education — pending
    Ransomware Ross Yerger Insurance id29191 View details United States Finance / Legal / Insurance — pending
    Ransomware Instituut voor de Nederlandse id29156 View details Netherlands Other — pending
    Ransomware Grupo Alvorada id29157 View details Brazil Agriculture / Food — pending
    Ransomware Ponisch Abogados id29158 View details Mexico Finance / Legal / Insurance — pending
    Ransomware Digiprint id29159 View details Poland Manufacturing / Engineering — pending
    Ransomware Focus Design Partners id29104 View details Qatar Healthcare / Pharma — pending
    Ransomware Shajarpak Securities id29105 View details Iran, Islamic Republic of Other — pending
    Ransomware Qatar National Broadband id29106 View details Qatar Public Sector — pending
    Ransomware Electroban SAE id29107 View details Paraguay Manufacturing / Engineering — pending
    Ransomware Oriental Diamond id29108 View details Japan Manufacturing / Engineering — pending
    Ransomware SETCAR id29109 View details Tunisia Manufacturing / Engineering — pending
    Ransomware Value Exchange International id29110 View details Hong Kong Retail / E-commerce — pending
    Ransomware Dodson & Horrell id29111 View details United Kingdom Agriculture / Food — pending
    Ransomware Amstel Securities id29112 View details Netherlands Finance / Legal / Insurance — pending
    Ransomware GeTeCe id29113 View details Germany Manufacturing / Engineering — pending
    Ransomware DermaPharm id28984 View details Denmark Manufacturing / Engineering — pending
    Ransomware Hillside Lumber id28985 View details United States Construction / Real Estate — pending
    Ransomware DEVCO id28986 View details Poland Construction / Real Estate — pending