We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1056 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 228 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 15 1.4%
  • Pending 1041 98.6%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 3h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 3h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (21)

    Victims (1056)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 201–300 of 1056.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware High Oakham Primary School id32842 View details United Kingdom Services — pending
    Ransomware Tentac id32843 View details Japan IT — pending
    Ransomware Dome Gold Mines id32844 View details South Africa Energy — pending
    Ransomware Dang Invest Group id32845 View details Viet Nam Finance / Legal / Insurance — pending
    Ransomware BGR Energy Systems id32846 View details India IT — pending
    Ransomware Ardom Eilot id32847 View details Israel IT — pending
    Ransomware Technical Asia id32848 View details Thailand IT — pending
    Ransomware Multipla Contabilidade Empresarial id32849 View details Brazil Services — pending
    Ransomware Somit id32850 View details Finland Healthcare / Pharma — pending
    Ransomware Wada Farms id32851 View details Japan Agriculture / Food — pending
    Ransomware Aforpa id32852 View details France Services — pending
    Ransomware Apteki Mareshki id32853 View details Bulgaria IT — pending
    Ransomware Librería Santa Fe id32854 View details Argentina Retail / E-commerce — pending
    Ransomware Sarku Japan id32855 View details United States Other — pending
    Ransomware TMI Tecnicas Mecanicas Ilerdenses id32856 View details Spain IT — pending
    Ransomware MedSkin Solutions Dr. Suwelack AG id32857 View details Germany Healthcare / Pharma — pending
    Ransomware PharmaEssentia Corporation id32726 View details Taiwan, Province of China Healthcare / Pharma — pending
    Ransomware Air Canada id32727 View details Canada Transportation / Travel / Logistics — leaked
    Ransomware Hollard Insurance Group id32651 View details South Africa Manufacturing / Engineering — pending
    Ransomware Drogueria Saporiti Sacifia id32652 View details Argentina Retail / E-commerce — pending
    Ransomware Mutant id32653 View details Brazil IT — pending
    Ransomware University of San Francisco id32654 View details United States Education — pending
    Ransomware Nile Projects Trading id32655 View details Egypt IT — pending
    Ransomware Chip7 id32656 View details Portugal IT — pending
    Ransomware Sharp Office id32657 View details Australia Services — pending
    Ransomware S A Chile id32658 View details Chile Retail / E-commerce — pending
    Ransomware Yapı Merkezi id32659 View details Türkiye Services — pending
    Ransomware Soni Dwarkadas Virchand id32660 View details India Retail / E-commerce — pending
    Ransomware Zanini id32661 View details Brazil Retail / E-commerce — pending
    Ransomware Domis id32662 View details Denmark IT — pending
    Ransomware Metro id32663 View details Germany Transportation / Travel / Logistics — pending
    Ransomware Biotipo Jeans id32664 View details Brazil IT — pending
    Ransomware Ritz Safety id32665 View details United States Services — pending
    Ransomware Comin Sac id32666 View details Peru Retail / E-commerce — pending
    Ransomware AbacoViaggi id32667 View details Italy IT — pending
    Ransomware El Carriel id32668 View details Colombia Retail / E-commerce — pending
    Ransomware Superstore id32669 View details Georgia Retail / E-commerce — pending
    Ransomware Leo Schachter Diamonds id32606 View details United States Services — pending
    Ransomware Zdrowit id32607 View details Poland Services — pending
    Ransomware Veradigm id32608 View details United States IT — pending
    Ransomware Lider Aviacao id32609 View details Brazil Transportation / Travel / Logistics — pending
    Ransomware Seasia Infotech id32414 View details India IT — pending
    Ransomware CareerSource Palm Beach County id32395 View details United States Services — pending
    Ransomware Nutex Health id32396 View details United States Healthcare / Pharma — pending
    Ransomware The Sole id32397 View details United Kingdom Retail / E-commerce — pending
    Ransomware EP Manufacturing Bhd id32329 View details Malaysia IT — pending
    Ransomware Saudi Consulting Services SAUD CONSULT id32330 View details Saudi Arabia Services — pending
    Ransomware Glassdoor id32273 View details United States Services — pending
    Ransomware G R Infraprojects id32274 View details India IT — pending
    Ransomware Northwest Trophy id32275 View details United States Services — pending
    Ransomware General Gruppo id32276 View details Italy Manufacturing / Engineering — pending
    Ransomware Ixa Systems id32277 View details Switzerland IT — pending
    Ransomware Tecno Accion id32278 View details Argentina IT — pending
    Ransomware Probe Test System id32279 View details Taiwan, Province of China Services — pending
    Ransomware SUNSEA id32280 View details Thailand IT — pending
    Ransomware Thai Film Industries PCL id32281 View details Thailand IT — pending
    Ransomware Adkisson Group id32282 View details United States IT — pending
    Ransomware ESB Puerto Rico Corp id32283 View details Puerto Rico IT — pending
    Ransomware Nutrypollo id32284 View details Mexico Retail / E-commerce — pending
    Ransomware Brebur id32285 View details United Kingdom Retail / E-commerce — pending
    Ransomware MB Associates id32286 View details United Kingdom Services — pending
    Ransomware Exacta Optech Labcenter id32287 View details Brazil IT — pending
    Ransomware Servicios Aereos Estrella id32288 View details Mexico IT — pending
    Ransomware Zion Construction id32203 View details United States Construction / Real Estate — pending
    Ransomware Party Rental id32154 View details United Kingdom Retail / E-commerce — pending
    Ransomware TEC Container id32155 View details Brazil IT — pending
    Ransomware Verbux id32156 View details Germany Transportation / Travel / Logistics — pending
    Ransomware Espinos id32157 View details Mexico Energy — pending
    Ransomware Incolur id32158 View details Chile Services — pending
    Ransomware AGS Cinemas id32022 View details India Services — pending
    Ransomware Eyecare Center of Snohomish id32023 View details United States Healthcare / Pharma — pending
    Ransomware Gould Sherwood Consulting id32024 View details United States Services — pending
    Ransomware Espac id32025 View details Chile Services — pending
    Ransomware Layher id32026 View details Chile Services — pending
    Ransomware Volktek id32027 View details Taiwan, Province of China IT — pending
    Ransomware Meridian Logistics Group id31958 View details United States — — pending
    Ransomware UOLconsult id31976 View details Austria — — pending
    Ransomware dlp motive id31977 View details Germany — — pending
    Ransomware AWJ Holding id31978 View details United Arab Emirates — — pending
    Ransomware Lexacaucho id31979 View details — — — pending
    Ransomware LOG Systems id31980 View details Poland — — pending
    Ransomware Magdalena Grand Beach Golf Resort id31981 View details Mexico — — pending
    Ransomware Akatake Engineering id31982 View details Japan — — pending
    Ransomware ESCON Group id31983 View details United States — — pending
    Ransomware Almeer id31984 View details United Arab Emirates — — pending
    Ransomware Geb Sas id31985 View details France — — pending
    Ransomware ARBEITERKAMMERN id31986 View details Austria — — pending
    Ransomware Aquasea id31987 View details Norway — — pending
    Ransomware CAZ Investments id31988 View details Belize — — pending
    Ransomware Oceanica Internacional id31989 View details Samoa — — pending
    Ransomware Ariel Energia id31990 View details Italy — — pending
    Ransomware BioPharma id31849 View details United States — — pending
    Ransomware P**** R***** id31850 View details — — — pending
    Ransomware Euroscreen id31911 View details Italy — — pending
    Ransomware CRASL id31912 View details United Kingdom — — pending
    Ransomware Senvest Capital id31913 View details Canada — — pending
    Ransomware Roadvision Systems id31914 View details Sweden — — pending
    Ransomware Babcock id31915 View details South Africa — — pending
    Ransomware IPS id31673 View details Italy IT — pending
    Ransomware Gfeller Treuhand und Verwaltungs id31675 View details Switzerland — — pending