Threat actor
89 observed events
AIThegentlemen has been observed in 13 ransomware incidents, targeting sectors including Business Services, Manufacturing, Consumer Services, Agriculture and Food Production, Technology, Transportation/Logistics, and Healthcare across France, the United States, Germany, Malaysia, Mexico, Vietnam, Singapore, Spain, and the United Arab Emirates.
AIThegentlemen claims to have listed financial-services firm TopMark Funding on its extortion site. The listing, tracked by Ransomware.live, is unverified.
AIControl Concepts Technology (Technology sector) is listed by threat actor "Thegentlemen" on Ransomware.live as an alleged victim. This is an unverified extortion-site claim.
AIThegentlemen group claims to have listed Philippine Savings Bank, a financial services firm, on its extortion site. This is an unverified claim, per Ransomware.live metadata.
AIRansomware group Thegentlemen claims to have listed Las Cenizas on its extortion site, per Ransomware.live. This is an unverified claim with no further details.
AITL;DR: Thegentlemen lists the Kenaitze Indian Tribe (Government & Defense) on its extortion site, claiming to hold data. This is an unverified claim from Ransomware.live, not a confirmed breach.
AIThegentlemen has listed Additive Manufacturing, a manufacturing-sector organization, on its extortion site, according to Ransomware.live. This is an unverified claim.
AIThegentlemen claims to have listed Salama Medicals Distributors Private, a healthcare organization, on an extortion site per Ransomware.live. This is an unverified claim.
AIThegentlemen group claims to have listed Krafman, a manufacturing firm, on its extortion site per Ransomware.live. This is an unverified claim, not a confirmed breach.
AIThegentlemen has listed Saturn Industries, a manufacturing firm, on Ransomware.live's extortion site. This is an unverified claim.
AIThegentlemen claims to have listed Acosta Sons, an agriculture and food production firm, on Ransomware.live. This is an unverified extortion-site listing.
AIThegentlemen has listed financial-services firm CFS on its extortion site, claiming to have obtained data. This is an unverified claim and has not been confirmed as a breach.
AIThegentlemen claims to have listed OHK Energy, an energy & utilities firm, on its extortion site. This is an unverified claim.
AIThegentlemen claims to have listed Hutch Paving, a transportation-sector organization, on its extortion site. This is an unverified listing, with no confirmation of a breach.
AIThegentlemen claims to have listed CRB group, a professional services firm, on its extortion site per Ransomware.live. This is an unverified claim.
AIThegentlemen group claims to have listed Partition Specialties, a manufacturing firm, on an extortion site. This is an unverified claim per Ransomware.live.
AIThegentlemen group claims to have listed Premier Fiduciary, a financial services firm, on its extortion site. This is an unverified data-leak claim; no breach is confirmed.
AIThegentlemen claims to have listed Bater on its extortion site, per Ransomware.live. Unverified claim; sector listed as Other.
AIThegentlemen group claims to have listed Precision Concrete Pumping, a manufacturing firm, on an extortion site. This is an unverified ransomware listing, with no confirmation of a breach or data leak.
AIThegentlemen has listed Clear Vision Signs (Retail & E-Commerce) on Ransomware.live, claiming a breach. This is an unverified extortion-site claim.
AIThegentlemen listed technology firm Orsima on its extortion site, claiming a breach. This is an unverified claim.
AIThegentlemen claims to have listed The Municipal Chamber of Serra, a government entity, on its extortion site. This is an unverified claim.
AIThegentlemen has listed Efrata College of Education (Education sector) on an extortion site, per Ransomware.live. This is an unverified claim of a data leak; no details are confirmed.
AIThegentlemen group claims to have listed healthcare organization Amicell on its extortion site, per Ransomware.live. This is an unverified claim, not a confirmed breach.
AIThegentlemen group has listed Paula Fish on its extortion site, claiming a data leak. This is an unverified claim per Ransomware.live; no details are confirmed.
AIThegentlemen claims to have listed Known, a technology-sector organization, on its extortion site per Ransomware.live. This is an unverified claim.
AIThegentlemen claims to have listed Peachtree Group on its extortion site, per Ransomware.live. This unverified listing is not confirmed, and no data details are included.
AIThegentlemen claims to have listed Municipalidad de San Luis, a government entity, on Ransomware.live. This is an unverified extortion-site claim.
AIThegentlemen claims to have listed manufacturing firm World Wide Fittings on its extortion site, per Ransomware.live. This is an unverified claim.
AIThegentlemen has listed Chemco Systems, a manufacturing firm, on an extortion site, claiming a breach. This is an unverified claim per Ransomware.live.
AIThegentlemen claims to have listed Total Auto Business Solutions (transportation sector) on an extortion site, per Ransomware.live. This is an unverified claim.
AIThegentlemen group claims to have listed Okovolt Solartechnik (Energy & Utilities sector) on Ransomware.live, an extortion-site listing. This is an unverified claim.
AIThegentlemen claims to have listed Pertamina, an energy & utilities company, on an extortion site. This is an unverified claim.
AIThegentlemen claims to have breached technology firm Promatrix, per an extortion listing on Ransomware.live.
AIThegentlemen claims an unverified breach of the Malaysian Nuclear Agency, a government & defense entity.
AIThegentlemen group claims to have compromised Delkart Industries Pvt, a manufacturing firm, according to an extortion site listing. The claim is unverified.
AIThe Thegentlemen ransomware group claims to have breached ETA Technology Pvt, a technology sector company, as listed on Ransomware.live.
AIThegentlemen claims to have breached Kontact Consortium India Pvt in an extortion listing on Ransomware.live; this claim is unverified.
AIUnverified: Thegentlemen claims to have compromised Upanal CNC Solutions (manufacturing) per their extortion site listing.
AIThegentlemen claims to have listed technology firm Indus Protech Solutions on their extortion site.
AIThegentlemen claims to have listed Angel Hotel (hospitality) on their extortion site; unverified, per Ransomware.live.
AIThegentlemen claims to have breached the Garfield County Sheriff Office, listed on an extortion site as an unverified claim.
AIRansomware group Thegentlemen claims to have breached Buck Knives, a manufacturer, per an unverified listing on Ransomware.live.
AIThegentlemen claims to have listed Advanced Marketing, a professional services firm, on its extortion site, per Ransomware.live. Status: unverified claim.
AIThegentlemen claims to have breached European Design, per an unverified extortion listing on Ransomware.live.
AIThegentlemen claims to have data from retail/e-commerce firm MK Jewelry, as listed on Ransomware.live. The claim is unverified.
AIThegentlemen group claims to have breached GUERREIROS seguros, a financial services firm, according to an unverified extortion-site listing on Ransomware.live.
AIThegentlemen claims to have listed Tikona Infinet, a technology company, on its extortion site, per Ransomware.live.
AIThegentlemen group claims to have listed TC Printing, a manufacturing firm, on their extortion site; this is an unverified claim.
AIThegentlemen claims to have breached Oldelval Oleoductos del Valle, an energy and utilities firm, according to an unverified listing on Ransomware.live.
AIThegentlemen claims to have listed Decoupe Laser Services, a Manufacturing organization, on their extortion site; the claim is unverified.
AIThegentlemen claims to have compromised Thialf, an energy and utilities company, as posted on their extortion site. This is an unverified claim.
AIThegentlemen claims to have breached Title Resources, a financial services firm. This extortion-site listing is unverified.
AIThegentlemen claims to have breached Clarke Radiology, a healthcare organization, per an unverified extortion site listing.
AIThegentlemen made an unverified claim of having listed Gloria Maris Groupe, an agriculture and food production company, on their extortion site.
AIThe Thegentlemen ransomware group claims to have breached Compagnie des Caoutchoucs du Pakidie, a manufacturing firm, per an extortion listing.
AIThegentlemen claims to have listed HBS Group, a Professional Services firm, on its extortion site per Ransomware.live; this is an unverified claim.
AIThegentlemen claims to have listed Agapit on its extortion site. This claim is unverified.
AIThegentlemen claims to have listed transportation firm Raben Group on its extortion site; the claim is unverified.
AIThegentlemen claims to have breached Henry Frerk Sons, a manufacturing company, according to an extortion site listing tracked by Ransomware.live.
AIThegentlemen claims to have listed technology firm SMRTR on their extortion site, according to Ransomware.live.
AIThegentlemen claims to have listed DayNDay on its extortion site. The claim is unverified.
AIThegentlemen claims to have breached Affinity Designs and listed the organization on their extortion site.
AIThegentlemen claims to have breached technology firm Velum, as listed on Ransomware.live; the claim is unverified.
AIThegentlemen claims to have breached Ceska filharmonie, as listed on their extortion site. The claim is unverified.
AIThegentlemen claims to have breached Herbahaz, an agriculture and food production organization.
AIThegentlemen has listed vpcgroup.com and customfoam.com on their extortion site, claiming a data breach in the Manufacturing sector.
AIThegentlemen claims to have breached Optiforms, a manufacturing firm, according to an unverified extortion site listing.
AIThegentlemen claims to have breached manufacturer MatTek, per an extortion-site listing (unverified).
AIThegentlemen listed Wunschkind Klinik Dr Brunbauer on Ransomware.live, claiming to have breached the healthcare organization. This claim is unverified.
AIThegentlemen claims to have breached Sirl, per an unverified extortion-site listing on Ransomware.live.
AIThegentlemen group claims to have listed Disney Family (Financial Services) on ransomware.live; an unverified claim.
AIThegentlemen claims to have breached Ecopetrol, an energy firm, per an unverified extortion-site listing.
AIThegentlemen claims to have breached the Military Sealift Command (transportation/logistics), listed on an extortion site.
AIThegentlemen claims to have listed healthcare organization Advantage Home Health Care on their extortion site. This claim is unverified.
AIThegentlemen ransomware group claims to have breached Sunway Scientific, a manufacturing company, as listed on its extortion site. The claim is unverified.
AIThegentlemen claims to have breached Tangram Interiors, a business services firm, as listed on Ransomware.live
AIThegentlemen claims to have breached BRAC, a business services organization, listing them on Ransomware.live. The claim is unverified.
AIThegentlemen claims to have breached public sector organization Customs Watch, as listed on Ransomware.live (unverified).
AIIn an unverified claim, the threat group Thegentlemen listed Hanseata, a financial services firm, on its extortion site.
AIThegentlemen claims to have listed Metro Mondego (Transportation/Logistics) on its extortion site. The claim is unverified.
AIThegentlemen, a ransomware group, claims to have breached public sector entity Landesbibliothek Coburg, as per an unverified extortion site listing.
AIThegentlemen claims to have breached manufacturing firm ALUFE Femszerkezeti Kft; the listing is unverified.
AIThegentlemen claims to have listed Tooltec (Manufacturing) on Ransomware.live, an unverified claim.
AIThegentlemen claims to have breached Terra Vitis, an agriculture and food production organization, per an extortion-site listing. This claim is unverified.
AIThegentlemen claims to have listed Vignobles Toutigeac (agriculture and food production) on Ransomware.live, in an unverified extortion claim.
AIThegentlemen claims to have breached data from Giraudi Group, a manufacturing firm, per a ransomware.live extortion listing.
AIThegentlemen claims to have leaked data from Mesto Celakovice, a manufacturing organization, per a ransomware extortion site listing.
AIThreat actor Thegentlemen has listed data from construction firm Byggelit Sverige on an extortion site, claiming a breach. The claim remains unverified.
AIThegentlemen group claims to have data from Terry P Moosmann CPA PC, a financial services firm, per a ransomware listing.