Home All Victims Hangzhou Industrial

Hangzhou Industrial

thegentlemen

This record tracks a ransomware attack claimed by the thegentlemen group against Hangzhou Industrial. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.

Window Zero

EXPOSURE GAP

Window Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.

-42days
t1 · Published t2 · Disclosed
Apr 14, 2026Mar 04, 2026
Country
China
Business Category
Finance / Legal / Insurance
Employees
101-1000
Discovered
2026-04-14
Published
April 14, 2026
Disclosed / Notified
Mar 04, 2026
Victim ID
kvF3kySsYu49

Attack Summary

hztrust.com zoominfo.com/c/hangzhou-industrial--commercial-trust-co-ltd/430077414 Hangzhou Industrial & Commercial Trust (hztrust.com) is a state-owned Chinese financial firm founded in 1986, headquartered in Hangzhou with offices in Shanghai and Beijing. It operates as a joint venture with Morgan Stanley, which holds a 19.9% equity stake (the legal maximum for foreign banks in China). The firm specializes in alternative asset management — private equity, separate accounts, and joint ventures — and as of 2014 managed over $4.8 billion AUM. Services include equity investment, M&A, asset restructuring, corporate finance, and financial advisory

Leak Screenshots

SAMPLE

Proof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.

file_tree.png
finance_2024.xlsx
passport_scan.jpg
contract_signed.pdf
Sign in or explore HaveIBeenRansom to view the full leak gallery.
View leak gallery →

Dark Web Exposure

Findings for hztrust.com — indexed by HaveIBeenRansom.
0
found in Infostealer logs
42
found in Traditional breaches
0
found in Ransomware leaks
AntiPublic_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
Tianya_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
OnlinerSpambot_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
clf09_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
LinkedIn.com.txt
Database World ROC · breach
••• emails
163.com-mysql-07.7z
Formaceft db · breach
••• emails
Cit0day [cit0day.in] breaches.csv
LKnet reserve chat · breach
••• emails
NetEase_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
+ 15 more leak sources locked
Leak volumes are locked
Sign in to reveal how many records each source exposed and the remaining 18 sources.
Want the complete picture — passwords, machines, full leak files? It's all searchable on HaveIBeenRansom.
Search this victim →
Visit Website View Group: thegentlemen
Legal Disclaimer: This ransomware victim record reflects information published on the operator's leak site. Breach.house does not acquire, download, host, access or redistribute unlawfully obtained data. It indexes only publicly visible information posted by ransomware, breach and infostealer operators and open web sources, without accessing the underlying stolen content. The service supports public awareness, legitimate research and cyber-resilience.