We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1056 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 228 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 15 1.4%
  • Pending 1041 98.6%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 2h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 2h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (21)

    Victims (1056)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 1056.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware CommTank id35962 View details United States IT pending
    Ransomware Ined id35961 View details United States IT pending
    Ransomware Spontini id35919 View details Italy Services pending
    Ransomware Serit CC id35914 View details Thailand Services pending
    Ransomware Marie Kruses Skole id35915 View details United States Education pending
    Ransomware United Rolls id35916 View details — Manufacturing / Engineering pending
    Ransomware Pac Production id35917 View details — null pending
    Ransomware Zehren and Associates id35918 View details — Services pending
    Ransomware ASL İnsaat id35911 View details Türkiye Services pending
    Ransomware Surexport id35912 View details United States Transportation / Travel / Logistics pending
    Ransomware Northwest Micro Systems id35913 View details United States IT pending
    Ransomware Epic Health id35907 View details United States Services pending
    Ransomware Incomelec id35908 View details United States IT pending
    Ransomware WIKA Beton id35902 View details Germany Manufacturing / Engineering pending
    Ransomware StarImage id35903 View details United States Services pending
    Ransomware Grupo Sanirent id35904 View details — null pending
    Ransomware Farmacias 911 id35905 View details Brazil Healthcare / Pharma pending
    Ransomware SoftwareOne id35906 View details United States IT pending
    Ransomware Belmont Resorts id35898 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware Atlas Stamping Manufacturing id35901 View details — Manufacturing / Engineering pending
    Ransomware EPMMOP id35900 View details — Other pending
    Ransomware Pure Perfection id35899 View details — Other pending
    Ransomware Zinkan Enterprises id35897 View details — Other pending
    Ransomware WABAG id35892 View details Philippines Services pending
    Ransomware Unisa Shoes id35893 View details Brazil Retail / E-commerce leaked
    Ransomware Acodafe id35894 View details United States IT pending
    Ransomware Malmsten id35896 View details Sweden IT pending
    Ransomware Betopia Group id35895 View details United States Other pending
    Ransomware Groupe AC Environnement id35889 View details — Services pending
    Ransomware SAP id35890 View details Germany IT pending
    Ransomware Trade Union Co id35888 View details — NGOs / Associations pending
    Ransomware Lydenburg Toyota id35891 View details South Africa Retail / E-commerce pending
    Ransomware Grundbaulabor Trier id35882 View details Germany Manufacturing / Engineering pending
    Ransomware Rexville Radiology id35883 View details United States Healthcare / Pharma pending
    Ransomware SuperScale id35884 View details United States IT pending
    Ransomware Mercantile Investment Corporation Bolivia S A id35885 View details Bolivia, Plurinational State of Finance / Legal / Insurance pending
    Ransomware Mann Group id35886 View details United States Services pending
    Ransomware FPT Software id35875 View details Viet Nam IT pending
    Ransomware Bi Link id35876 View details United States IT pending
    Ransomware Eichstatt id35877 View details Germany null pending
    Ransomware ImmoVia Hausverwaltung id35879 View details Germany Services pending
    Ransomware Cherry Bekaert id35870 View details United States Services pending
    Ransomware SK Capital Partners id35871 View details United States Finance / Legal / Insurance pending
    Ransomware Svedala Kommun id35872 View details Sweden Services pending
    Ransomware Angeles Contractor id35873 View details United States Construction / Real Estate pending
    Ransomware First Dental id35874 View details United States Healthcare / Pharma pending
    Ransomware GIO Dental id35869 View details United States Healthcare / Pharma pending
    Ransomware Weld Re 8 School District id35525 View details United States Manufacturing / Engineering pending
    Ransomware Red Oak Technologies id35526 View details United States IT pending
    Ransomware Penco Products id35527 View details United States Manufacturing / Engineering pending
    Ransomware Conax Technologies id35528 View details Norway IT pending
    Ransomware Wellington College International School Bangkok id34941 View details Thailand Education — leaked
    Ransomware Gio Dental Med Spa id34942 View details Italy Healthcare / Pharma — pending
    Ransomware First Dental Health id34943 View details United States Healthcare / Pharma — pending
    Ransomware AirQ id34945 View details Andorra Communication / Marketing — pending
    Ransomware Martin LLP id34532 View details United Kingdom Services — pending
    Ransomware MAP SA id34533 View details Switzerland IT — pending
    Ransomware Suhai Segurana Pessoal id34534 View details Brazil Services — pending
    Ransomware SBI Audiovisual Medinbox id34535 View details Spain IT — pending
    Ransomware Saga University id34536 View details Japan Education — pending
    Ransomware Netcore Unbxd id34537 View details India IT — pending
    Ransomware REGiO Nord id34538 View details Germany Manufacturing / Engineering — pending
    Ransomware Museum Siam id34539 View details Thailand Education — pending
    Ransomware Skin Center id34540 View details United States Healthcare / Pharma — pending
    Ransomware Thai Ha PCL KASET id34541 View details Thailand Retail / E-commerce — pending
    Ransomware Inovar Packaging Group id34542 View details Australia Manufacturing / Engineering — pending
    Ransomware Engineers Ireland id34543 View details Ireland Manufacturing / Engineering — pending
    Ransomware North Bridge Venture Partners id34544 View details United States IT — leaked
    Ransomware SONGWOOI id34545 View details Korea, Republic of Retail / E-commerce — pending
    Ransomware Petroleum Telcom Communications id34546 View details Pakistan Telecommunications — pending
    Ransomware Axle Logistics id34547 View details United States Transportation / Travel / Logistics — pending
    Ransomware CAS Paper Mill id34549 View details Canada Manufacturing / Engineering — pending
    Ransomware St Peters Anglican Primary School id34551 View details Australia Education — pending
    Ransomware Pantanal Agricola id34552 View details Brazil Agriculture / Food — pending
    Ransomware Sladek Partners id34554 View details Czechia IT — leaked
    Ransomware JJS Justice id34555 View details United Kingdom Finance / Legal / Insurance — pending
    Ransomware ServiceMaster of Ottawa id34557 View details Canada Services — pending
    Ransomware Entry Systems Garage Doors Gates id34559 View details United States IT — pending
    Ransomware Europ Assistance South Africa id34560 View details South Africa Services — pending
    Ransomware Taiwan Otsuka Pharmaceutical id34562 View details Taiwan, Province of China Manufacturing / Engineering — leaked
    Ransomware CLIMEDI id34563 View details Brazil Healthcare / Pharma — pending
    Ransomware Universidade de Passo Fundo id34565 View details Brazil Finance / Legal / Insurance — pending
    Ransomware Campbell Rhea id34566 View details United States Agriculture / Food — pending
    Ransomware Newport Beach Dentistry id34567 View details United States Healthcare / Pharma — pending
    Ransomware Tulsat id34568 View details Kazakhstan IT — pending
    Ransomware Shared Medical Technology id34569 View details United States Healthcare / Pharma — pending
    Ransomware Santa Barbara Endodontics id34570 View details United States Manufacturing / Engineering — pending
    Ransomware Ecuadors National Police id34571 View details Ecuador Public Sector — pending
    Ransomware Placer AI id33721 View details United States — — pending
    Ransomware BigID id33722 View details United States — pending
    Ransomware Confluent id33723 View details United States — pending
    Ransomware MoneyGram id33724 View details United States — pending
    Ransomware KFC id33725 View details United States — pending
    Ransomware Royal Thai Air Force id33694 View details Thailand — — pending
    Ransomware DW McMillan Memorial Hospital id33615 View details United States — — pending
    Ransomware Saskatoon Tribal Council id33616 View details Canada — — pending
    Ransomware Aquatech id33617 View details United States — — pending
    Ransomware AnyTech365 id33618 View details United Kingdom — — pending
    Ransomware Greenbrook Engineering id33619 View details United Kingdom — — pending
    Ransomware TGN id33620 View details Argentina — — pending