Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1128 published victims and 2 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1128 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-09-15 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 220 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Dark Eye as a ransomware group with 1128 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

No leak-status data available yet.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 2 Onion service Down checked 4h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion
    Leak location 1 Onion service Down checked 4h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

    Top Activity Sectors (20)

    Victims (1128)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 901–1000 of 1128.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Gerleinco id27141 View details Colombia Transportation / Travel / Logistics
    Ransomware Primus id27064 View details Thailand Communication / Marketing
    Ransomware Comtec 2000 id27063 View details Romania Communication / Marketing
    Ransomware Reanthong Partcenter id27062 View details Thailand Communication / Marketing
    Ransomware CHS Villach id27022 View details Austria Education
    Ransomware Afezo id26960 View details Netherlands Construction / Real Estate
    Ransomware Ricopia id26959 View details Spain IT
    Ransomware All India Minerals id26958 View details India Communication / Marketing
    Ransomware Labtician Ophthalmics id26957 View details Canada Communication / Marketing
    Ransomware Special Shapes Refractory id26956 View details United States Communication / Marketing
    Ransomware Grand Hotel id26906 View details Taiwan, Province of China Hospitality / Food & Beverage / Tourism
    Ransomware Sejlstrup id26905 View details Denmark Communication / Marketing
    Ransomware Thg id26904 View details United Kingdom Services
    Ransomware Fundao Para id26903 View details Brazil Communication / Marketing
    Ransomware Zabun id26878 View details Türkiye Communication / Marketing
    Ransomware Sando Tech id26877 View details United States IT
    Ransomware ACFA id26876 View details Canada Communication / Marketing
    Ransomware Amata id26875 View details Thailand Manufacturing / Engineering
    Ransomware Universidade Federal de Sergipe id26874 View details Brazil Public Sector
    Ransomware SATO id26847 View details Greece Communication / Marketing
    Ransomware REDACTED id26846 View details Other
    Ransomware Advanced Connection Corporation id26845 View details Japan IT
    Ransomware OCEANIST ENGINEERING id26844 View details India Manufacturing / Engineering
    Ransomware Boutique Harley-Davidson id26842 View details France Retail / E-commerce
    Ransomware Silvestres id26841 View details United States Communication / Marketing
    Ransomware Nathalin Group id26840 View details Thailand Transportation / Travel / Logistics
    Ransomware Ruamjai id26810 View details Thailand Healthcare / Pharma
    Ransomware MUST Informatique id26809 View details Switzerland Healthcare / Pharma
    Ransomware OKJ Group id26808 View details Finland Hospitality / Food & Beverage / Tourism
    Ransomware Smartbytes id26807 View details India IT
    Ransomware Industrias Iberia id26806 View details Spain Agriculture / Food
    Ransomware El IBR id26805 View details Spain IT
    Ransomware Dos id26804 View details Thailand Communication / Marketing
    Ransomware Global Trust Advisors id26803 View details United States Services
    Ransomware Wachendorff id26802 View details Germany Manufacturing / Engineering
    Ransomware Silver Lake Medical Center id26773 View details United States Healthcare / Pharma
    Ransomware True Value id26716 View details United States Communication / Marketing
    Ransomware Pollo Cibao id26715 View details Dominican Republic Communication / Marketing
    Ransomware Sasin Colleges & Universities id26714 View details Thailand Education
    Ransomware Line Up Korea id26713 View details Korea, Republic of Communication / Marketing
    Ransomware Seac id26712 View details Italy Services
    Ransomware Qingtian Express Co. id26711 View details Taiwan, Province of China Transportation / Travel / Logistics
    Ransomware Garuda Indonesia Airlines id26710 View details Indonesia Transportation / Travel / Logistics
    Ransomware Grupo Progresso id26709 View details Brazil Communication / Marketing
    Ransomware Sawafi id26708 View details Saudi Arabia Energy
    Ransomware HUGS Insurance id26707 View details Thailand Finance / Legal / Insurance
    Ransomware Perfumeria Pigmento id26706 View details Argentina Retail / E-commerce
    Ransomware Comdat Datasystems id26575 View details Germany Communication / Marketing
    Ransomware CROSS JEANS Zakrt id26574 View details Poland Retail / E-commerce
    Ransomware BITS "Business Information Technology Solutions" id26573 View details Germany IT
    Ransomware Intsika Yethu Municipality Government id26572 View details South Africa Public Sector
    Ransomware Global Group id26571 View details India Construction / Real Estate
    Ransomware Copamarina Beach Resort id26570 View details Puerto Rico Hospitality / Food & Beverage / Tourism
    Ransomware Oceania Gas Chemicals & Related Products id26569 View details Samoa Energy
    Ransomware White Beach Hotel id26490 View details Philippines Hospitality / Food & Beverage / Tourism
    Ransomware Futue Bath id26489 View details Spain Communication / Marketing
    Ransomware LSA International id26488 View details United Kingdom Communication / Marketing
    Ransomware Gruppo Avanti id26487 View details Italy Communication / Marketing
    Ransomware Yash Highvoltage Insulators Pvt id26483 View details India Communication / Marketing
    Ransomware City of New Castle id26482 View details United States Public Sector
    Ransomware Nile Air Information id26481 View details Egypt Transportation / Travel / Logistics
    Ransomware Smart Glass id26480 View details Egypt Communication / Marketing
    Ransomware Autostrad Rent a Car id26475 View details United Arab Emirates Communication / Marketing
    Ransomware Emirates National Group id26470 View details United Arab Emirates Communication / Marketing
    Ransomware WCT Holdings Berhad id26448 View details Malaysia Construction / Real Estate
    Ransomware Erg Otoyol id26447 View details Türkiye Communication / Marketing
    Ransomware Thammasat University id26446 View details Thailand Education
    Ransomware Ghana Bauxite Energy, Utilities & Waste id26445 View details Ghana Energy
    Ransomware Clark Foam Products id26444 View details United States Communication / Marketing
    Ransomware Smartply Europe id26405 View details Ireland Communication / Marketing
    Ransomware Instituto Nacional de Derechos Humanos id26404 View details Chile Communication / Marketing
    Ransomware UniFil id26403 View details Brazil Communication / Marketing
    Ransomware NFT Technology id26402 View details Taiwan, Province of China IT
    Ransomware Museu do Caramulo id26401 View details Portugal Finance / Legal / Insurance
    Ransomware Agis Civil Engineering Construction id26400 View details Brazil Construction / Real Estate
    Ransomware Fgf Colleges & Universities id26399 View details Brazil Education
    Ransomware Area Limpia id26390 View details Colombia Communication / Marketing
    Ransomware KlearNow.AI id26372 View details United States Transportation / Travel / Logistics
    Ransomware rea Limpia id26368 View details Mexico Communication / Marketing
    Ransomware CPQ Ingenieros id26266 View details Spain Communication / Marketing
    Ransomware Hafa id26265 View details Sweden Communication / Marketing
    Ransomware Novetex Textiles id26264 View details Hong Kong Construction / Real Estate
    Ransomware Wells Fargo id26263 View details United States Communication / Marketing
    Ransomware L'Aeroclub id26262 View details France Education
    Ransomware Infinite Tiers Group id26258 View details United States IT
    Ransomware Silvi SRL id26257 View details Italy Manufacturing / Engineering
    Ransomware Marina Home Interiors id26256 View details United Arab Emirates Communication / Marketing
    Ransomware Nishiyama Seisakusho id26255 View details Japan Manufacturing / Engineering
    Ransomware BAM - Brand Art Media id26254 View details Germany Communication / Marketing
    Ransomware Gady Family id26253 View details Austria Agriculture / Food
    Ransomware Dome Partners id26252 View details United States Construction / Real Estate
    Ransomware Chonburi Provincial Administration id26251 View details Thailand Communication / Marketing
    Ransomware Torus id26250 View details United States Healthcare / Pharma
    Ransomware PLUS Malaysia Berhad id26249 View details Malaysia Communication / Marketing
    Ransomware EXIM Bank id26248 View details United States Finance / Legal / Insurance
    Ransomware Ankara-İzmir id26247 View details Türkiye Transportation / Travel / Logistics
    Ransomware Trace id26246 View details France Retail / E-commerce
    Ransomware Far East id26245 View details Thailand Retail / E-commerce
    Ransomware Thin Red Line id26109 View details China IT
    Ransomware Handsome Manufacturing id26043 View details Hong Kong Manufacturing / Engineering