Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1128 published victims and 2 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1128 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-09-15 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 220 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Dark Eye as a ransomware group with 1128 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

No leak-status data available yet.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 2 Onion service Down checked 2h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion
    Leak location 1 Onion service Down checked 2h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors (20)

    Victims (1128)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 1128.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware ACA Pescara id32828 View details Italy Services
    Ransomware Hattiesburg Eye Clinic id32829 View details United States Healthcare / Pharma
    Ransomware Indic id32830 View details India IT
    Ransomware Aurora Technologies id32831 View details United States IT
    Ransomware Goteborgsregionens Tekniska Gymnasium id32832 View details Sweden Services
    Ransomware Alchin Long Group id32833 View details Singapore Manufacturing / Engineering
    Ransomware Gelarti id32834 View details Peru IT
    Ransomware Balkan Polymers id32835 View details Bulgaria Manufacturing / Engineering
    Ransomware Cedars Foods id32836 View details United States Agriculture / Food
    Ransomware Agenzia Vittoria Assicurazioni id32837 View details Italy Finance / Legal / Insurance
    Ransomware Downrite Engineering id32838 View details United States IT
    Ransomware Neff Drexel id32839 View details Switzerland Services
    Ransomware Iveta id32840 View details Croatia Services
    Ransomware Humboldt id32841 View details Brazil Manufacturing / Engineering
    Ransomware High Oakham Primary School id32842 View details United Kingdom Services
    Ransomware Tentac id32843 View details Japan IT
    Ransomware Dome Gold Mines id32844 View details South Africa Energy
    Ransomware Dang Invest Group id32845 View details Viet Nam Finance / Legal / Insurance
    Ransomware BGR Energy Systems id32846 View details India IT
    Ransomware Ardom Eilot id32847 View details Israel IT
    Ransomware Technical Asia id32848 View details Singapore IT
    Ransomware Multipla Contabilidade Empresarial id32849 View details Brazil Services
    Ransomware Somit id32850 View details Finland Healthcare / Pharma
    Ransomware Wada Farms id32851 View details Japan Agriculture / Food
    Ransomware Aforpa id32852 View details France Services
    Ransomware Apteki Mareshki id32853 View details Bulgaria IT
    Ransomware Librería Santa Fe id32854 View details Argentina Retail / E-commerce
    Ransomware Sarku Japan id32855 View details United States Other
    Ransomware TMI Tecnicas Mecanicas Ilerdenses id32856 View details Spain IT
    Ransomware MedSkin Solutions Dr. Suwelack AG id32857 View details Germany Healthcare / Pharma
    Ransomware PharmaEssentia Corporation id32726 View details Taiwan, Province of China Healthcare / Pharma
    Ransomware PharmaEssentia Corporation id32726 View details Taiwan, Province of China Healthcare / Pharma
    Ransomware Air Canada id32727 View details Canada Transportation / Travel / Logistics
    Ransomware Air Canada id32727 View details Canada Transportation / Travel / Logistics
    Ransomware Hollard Insurance Group id32651 View details South Africa Manufacturing / Engineering
    Ransomware Hollard Insurance Group id32651 View details South Africa Manufacturing / Engineering
    Ransomware Drogueria Saporiti Sacifia id32652 View details Argentina Retail / E-commerce
    Ransomware Drogueria Saporiti Sacifia id32652 View details Argentina Retail / E-commerce
    Ransomware Mutant id32653 View details Brazil IT
    Ransomware Mutant id32653 View details Brazil IT
    Ransomware University of San Francisco id32654 View details United States Education
    Ransomware University of San Francisco id32654 View details United States Education
    Ransomware Nile Projects Trading id32655 View details Egypt IT
    Ransomware Nile Projects Trading id32655 View details Egypt IT
    Ransomware Chip7 id32656 View details Portugal IT
    Ransomware Chip7 id32656 View details Portugal IT
    Ransomware Sharp Office id32657 View details Australia Services
    Ransomware Sharp Office id32657 View details Australia Services
    Ransomware S A Chile id32658 View details Chile Retail / E-commerce
    Ransomware S A Chile id32658 View details Chile Retail / E-commerce
    Ransomware Yapı Merkezi id32659 View details Türkiye Services
    Ransomware Yapı Merkezi id32659 View details Türkiye Services
    Ransomware Soni Dwarkadas Virchand id32660 View details India Retail / E-commerce
    Ransomware Soni Dwarkadas Virchand id32660 View details India Retail / E-commerce
    Ransomware Zanini id32661 View details Brazil Retail / E-commerce
    Ransomware Zanini id32661 View details Brazil Retail / E-commerce
    Ransomware Domis id32662 View details Denmark IT
    Ransomware Domis id32662 View details Denmark IT
    Ransomware Metro id32663 View details Germany Transportation / Travel / Logistics
    Ransomware Metro id32663 View details Germany Transportation / Travel / Logistics
    Ransomware Biotipo Jeans id32664 View details Brazil IT
    Ransomware Biotipo Jeans id32664 View details Brazil IT
    Ransomware Ritz Safety id32665 View details United States Services
    Ransomware Ritz Safety id32665 View details United States Services
    Ransomware Comin Sac id32666 View details Peru Retail / E-commerce
    Ransomware Comin Sac id32666 View details Peru Retail / E-commerce
    Ransomware AbacoViaggi id32667 View details Italy IT
    Ransomware AbacoViaggi id32667 View details Italy IT
    Ransomware El Carriel id32668 View details Colombia Retail / E-commerce
    Ransomware El Carriel id32668 View details Colombia Retail / E-commerce
    Ransomware Superstore id32669 View details Georgia Retail / E-commerce
    Ransomware Superstore id32669 View details Georgia Retail / E-commerce
    Ransomware Leo Schachter Diamonds id32606 View details United States Services
    Ransomware Leo Schachter Diamonds id32606 View details United States Services
    Ransomware Zdrowit id32607 View details Poland Services
    Ransomware Zdrowit id32607 View details Poland Services
    Ransomware Veradigm id32608 View details United States IT
    Ransomware Veradigm id32608 View details United States IT
    Ransomware Lider Aviacao id32609 View details Brazil Transportation / Travel / Logistics
    Ransomware Lider Aviacao id32609 View details Brazil Transportation / Travel / Logistics
    Ransomware Seasia Infotech id32414 View details India IT
    Ransomware Seasia Infotech id32414 View details India IT
    Ransomware CareerSource Palm Beach County id32395 View details United States Services
    Ransomware CareerSource Palm Beach County id32395 View details United States Services
    Ransomware Nutex Health id32396 View details United States Healthcare / Pharma
    Ransomware Nutex Health id32396 View details United States Healthcare / Pharma
    Ransomware The Sole id32397 View details United Kingdom Retail / E-commerce
    Ransomware The Sole id32397 View details United Kingdom Retail / E-commerce
    Ransomware EP Manufacturing Bhd id32329 View details Malaysia IT
    Ransomware EP Manufacturing Bhd id32329 View details Malaysia IT
    Ransomware Saudi Consulting Services SAUD CONSULT id32330 View details Saudi Arabia Services
    Ransomware Saudi Consulting Services SAUD CONSULT id32330 View details Saudi Arabia Services
    Ransomware Glassdoor id32273 View details United States Services
    Ransomware Glassdoor id32273 View details United States Services
    Ransomware G R Infraprojects id32274 View details India IT
    Ransomware G R Infraprojects id32274 View details India IT
    Ransomware Northwest Trophy id32275 View details United States Services
    Ransomware Northwest Trophy id32275 View details United States Services
    Ransomware General Gruppo id32276 View details Italy Manufacturing / Engineering
    Ransomware General Gruppo id32276 View details Italy Manufacturing / Engineering