We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1056 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 228 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 15 1.4%
  • Pending 1041 98.6%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 3h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 3h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (21)

    Victims (1056)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 101–200 of 1056.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Galil Engineering id33621 View details Israel — — pending
    Ransomware Smart Value id33622 View details Belize — — pending
    Ransomware Kooltronic id33623 View details United States — — pending
    Ransomware Skyplan Services id33624 View details — — — pending
    Ransomware Refako Autodele id33625 View details Denmark — — pending
    Ransomware SAS H2O MICHEL id33626 View details France — — pending
    Ransomware Husky Ltee id33627 View details Canada — — pending
    Ransomware Asessippi Ski Resort id33628 View details Canada — — pending
    Ransomware PIR Sales id33629 View details United States — — pending
    Ransomware Jentech Precision Industrial id33630 View details Taiwan, Province of China — — pending
    Ransomware Santee School District Foundation id33631 View details United States — — pending
    Ransomware University of Buraimi id33632 View details Oman — — pending
    Ransomware Ansonia Public Schools id33633 View details United States — — pending
    Ransomware All Souls St Gabriels School id33634 View details Australia — — pending
    Ransomware Rag Electric id33635 View details United States — — pending
    Ransomware Maverick Desk id33636 View details United States — — pending
    Ransomware Polishing Proz id33637 View details United States — — pending
    Ransomware Northwestern Polytechnic id33638 View details Canada — — pending
    Ransomware Machine sro id33639 View details Czechia — — pending
    Ransomware Ability Enterprise id33640 View details Taiwan, Province of China — — pending
    Ransomware Alcoholics Anonymous id33641 View details United States — — pending
    Ransomware Mabris id33642 View details France — — pending
    Ransomware Potomac Animal Hospital id33643 View details United States — — pending
    Ransomware The Law Office of James R Walsh id33644 View details United States — — pending
    Ransomware All Smiles Dental of Falls Church id33645 View details United States — — pending
    Ransomware Majestic Holidays India Private Limited id33646 View details India — — pending
    Ransomware Habbas Associates id33647 View details United States — — pending
    Ransomware Palma id33648 View details United States — — pending
    Ransomware MercyMed of Columbus id33649 View details United States — — pending
    Ransomware North Philadelphia Health System id33650 View details United States — — leaked
    Ransomware Deloitte id33651 View details United States — pending
    Ransomware Center State Engineering id33439 View details United States Manufacturing / Engineering — pending
    Ransomware Aware id33423 View details United States IT — pending
    Ransomware WOOSHIN SAFETY SYSTEMS CO LTD id33425 View details Korea, Republic of IT — pending
    Ransomware Zelham id33427 View details United States IT — pending
    Ransomware Hospital de la Santa Creu i Sant Pau id33428 View details Spain Retail / E-commerce — pending
    Ransomware Rotamac id33429 View details Canada Healthcare / Pharma — pending
    Ransomware Mandurah State Emergency Service id33430 View details Australia Services — pending
    Ransomware Westrop Primary & Nursery School id33431 View details United Kingdom Education — pending
    Ransomware Gerrity Stone id33432 View details United States IT — pending
    Ransomware LegalWise id33294 View details South Africa Finance / Legal / Insurance — pending
    Ransomware Samwumed id33295 View details Korea, Republic of IT — pending
    Ransomware Edcon id33296 View details South Africa Services — pending
    Ransomware Defencebit id33297 View details United Kingdom IT — pending
    Ransomware Datacomm Services id33298 View details United States Telecommunications — pending
    Ransomware Webb Electric Company of Florida id33299 View details United States Services — pending
    Ransomware Solaria id33300 View details Indonesia Retail / E-commerce — pending
    Ransomware Auren id33301 View details Spain Services — pending
    Ransomware QUALITY SPORT Topsport Italia id33302 View details Italy Retail / E-commerce — pending
    Ransomware Europrim id33303 View details France Finance / Legal / Insurance — pending
    Ransomware Telrad Networks id33304 View details Israel IT — pending
    Ransomware Groupe APROSEP id33305 View details Senegal Services — pending
    Ransomware Drinks Wines Spirits id33306 View details Taiwan, Province of China Hospitality / Food & Beverage / Tourism — pending
    Ransomware Custom Rx Shoppe id33307 View details United States Healthcare / Pharma — pending
    Ransomware Williamson Dacar Associates id33308 View details United Kingdom Transportation / Travel / Logistics — pending
    Ransomware Agospap id33309 View details Greece Agriculture / Food — pending
    Ransomware DBU Construction id33310 View details United States Construction / Real Estate — pending
    Ransomware Northern NJ Eye Institute id33311 View details United States — — leaked
    Ransomware Tommy Garner Air Conditioning Heating id33312 View details United States Retail / E-commerce — pending
    Ransomware Auto Holler id33313 View details Austria Manufacturing / Engineering — pending
    Ransomware VUS - The English Center id33315 View details Viet Nam Education — pending
    Ransomware Josee Bendaaa-Guerrero Asociados id33317 View details Belize Other — pending
    Ransomware Don Hierro id33318 View details Mexico Retail / E-commerce — pending
    Ransomware Corswarem Group id33320 View details Belgium IT — pending
    Ransomware Pulmonary Services Group id33322 View details Puerto Rico Healthcare / Pharma — pending
    Ransomware Guardrisk id33188 View details South Africa Services pending
    Ransomware Metalware Corporation id33189 View details Canada Manufacturing / Engineering — pending
    Ransomware StMicroelectronics id33191 View details Italy IT pending
    Ransomware Hell Helmut GmbH id33192 View details Austria Retail / E-commerce — pending
    Ransomware Magnetos y Refacciones id33193 View details Mexico Retail / E-commerce — pending
    Ransomware ANP Health id33194 View details Brazil Healthcare / Pharma — pending
    Ransomware Progeny id33195 View details Antigua and Barbuda Agriculture / Food — pending
    Ransomware Grupo MARSAN id33196 View details Mexico Retail / E-commerce — pending
    Ransomware Agrocampo id33197 View details Colombia Agriculture / Food — pending
    Ransomware Markisol id33198 View details Sweden Services — pending
    Ransomware Trifecta Software id33199 View details United States IT — pending
    Ransomware PuroClean id33200 View details United States Services — pending
    Ransomware Brancoptica id33201 View details Portugal Services — pending
    Ransomware Craisa id33202 View details Brazil IT — pending
    Ransomware Crystal Glass id33203 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Pajulahti id33204 View details Finland Retail / E-commerce — pending
    Ransomware Ligue se Grupo id33205 View details Portugal Services — pending
    Ransomware Charles Keith id33206 View details Singapore Retail / E-commerce — pending
    Ransomware ENKEI******* id33207 View details Germany Manufacturing / Engineering — pending
    Ransomware FTAPI Software id33208 View details United States IT — leaked
    Ransomware Grupolider id33025 View details Angola Services — pending
    Ransomware ACA Pescara id32828 View details Italy Services — pending
    Ransomware Hattiesburg Eye Clinic id32829 View details United States Healthcare / Pharma — pending
    Ransomware Indic id32830 View details India IT — pending
    Ransomware Aurora Technologies id32831 View details United States IT — pending
    Ransomware Goteborgsregionens Tekniska Gymnasium id32832 View details Sweden Services — pending
    Ransomware Alchin Long Group id32833 View details Australia Manufacturing / Engineering — pending
    Ransomware Gelarti id32834 View details Peru IT — pending
    Ransomware Balkan Polymers id32835 View details Bulgaria Manufacturing / Engineering — pending
    Ransomware Cedars Foods id32836 View details United States Agriculture / Food — pending
    Ransomware Agenzia Vittoria Assicurazioni id32837 View details Italy Finance / Legal / Insurance — pending
    Ransomware Downrite Engineering id32838 View details United States IT — pending
    Ransomware Neff Drexel id32839 View details Switzerland Services — pending
    Ransomware Iveta id32840 View details Croatia Services — pending
    Ransomware Humboldt id32841 View details Brazil Manufacturing / Engineering — pending