We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1056 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 228 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 15 1.4%
  • Pending 1041 98.6%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 3h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 3h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (21)

    Victims (1056)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 501–600 of 1056.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware GIA Partners id30183 View details United States IT — pending
    Ransomware Rowley Properties id30184 View details United Kingdom Construction / Real Estate — pending
    Ransomware Canada Wide Media id30185 View details Canada Finance / Legal / Insurance — pending
    Ransomware ErgoMed id30186 View details United Kingdom Healthcare / Pharma — pending
    Ransomware MBO GmbH id30187 View details Germany Manufacturing / Engineering — pending
    Ransomware Meccanica Gn id30188 View details Italy Manufacturing / Engineering — pending
    Ransomware Al Dhow Group id30189 View details United Arab Emirates Transportation / Travel / Logistics — pending
    Ransomware Beran Concrete id30190 View details Czechia Construction / Real Estate — pending
    Ransomware BDS CZ id30191 View details Czechia Finance / Legal / Insurance — pending
    Ransomware Stadttheater Giessen id30192 View details Germany Hospitality / Food & Beverage / Tourism — pending
    Ransomware Gegenbauer Elektrotechnik id30193 View details Austria IT — pending
    Ransomware Bell Hardware id30194 View details United States Retail / E-commerce — pending
    Ransomware CHIFENG GOLD SEPON id30195 View details Lao People's Democratic Republic IT — pending
    Ransomware Natren id30196 View details United States Healthcare / Pharma — pending
    Ransomware Au Vieux Campeur id30197 View details France Retail / E-commerce — pending
    Ransomware Ayres Carr & Sullivan, P.C. id30198 View details United States IT — pending
    Ransomware Immling id30199 View details Germany Retail / E-commerce — pending
    Ransomware DHC Corporation id30200 View details Japan Retail / E-commerce — pending
    Ransomware Steegaa Interior id30201 View details United Arab Emirates Other — pending
    Ransomware Indra Group id30202 View details Spain IT — pending
    Ransomware Climax Technology id30203 View details Taiwan, Province of China Manufacturing / Engineering — pending
    Ransomware Centre Ophtalmologique dErmont id30204 View details France Healthcare / Pharma — pending
    Ransomware Comp Trading Co id30205 View details Thailand — — pending
    Ransomware Mondottica id30206 View details Italy — — pending
    Ransomware OSP HOLDING FRANCE id30207 View details France — — pending
    Ransomware NATURGHIACCIO id30208 View details Italy — — pending
    Ransomware MakoLab id30209 View details Poland — — pending
    Ransomware EMAS Group id30210 View details Czechia — — pending
    Ransomware The City of Boyne City id30211 View details United States — — pending
    Ransomware Oron Law Firm id30212 View details Switzerland — — pending
    Ransomware Wacha Justen id30213 View details Nicaragua — — pending
    Ransomware CUI Agency id30214 View details United States — — pending
    Ransomware Melcor Developments Ltd id30215 View details Canada — — pending
    Ransomware FAC Logistique id30216 View details France — — pending
    Ransomware SDEZ id30217 View details France — — pending
    Ransomware Pou Sheng International id30218 View details Taiwan, Province of China — — pending
    Ransomware Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik id30055 View details Germany IT — pending
    Ransomware hiddenn id30042 View details — — — leaked
    Ransomware Vera Chimie Management id30043 View details France — — pending
    Ransomware Alexander Buch Bilanzbuchhalter id30044 View details Germany — — pending
    Ransomware SGS Malaysia id30045 View details Malaysia — — pending
    Ransomware TERRIO Therapy Fitness id30046 View details Mexico — — pending
    Ransomware Ty Thac Co id30047 View details Viet Nam Healthcare / Pharma — pending
    Ransomware Amigest id30048 View details France — — pending
    Ransomware Yudu Technology id30049 View details Singapore — — pending
    Ransomware Burris MacOmber id30050 View details United States — — leaked
    Ransomware Sertrans id30051 View details Spain — — pending
    Ransomware Cofaq id30052 View details France — — pending
    Ransomware Al Khaja Holding id30053 View details United Arab Emirates — — pending
    Ransomware Athens Orthopedic Clinic id30055 View details United States — — pending
    Ransomware Enciso Ltda id29870 View details Chile Other — pending
    Ransomware South Texas Spinal Clinic id29871 View details United States Healthcare / Pharma — pending
    Ransomware Mahajak Development id29872 View details Thailand Manufacturing / Engineering — pending
    Ransomware Calipage Humblet id29873 View details Belgium IT — pending
    Ransomware Ministarstvo zdravstva Republike Hrvatske id29874 View details Croatia Public Sector — pending
    Ransomware Palmer Sicard id29875 View details — Finance / Legal / Insurance — pending
    Ransomware Linnecken Partner id29876 View details Germany Finance / Legal / Insurance — pending
    Ransomware Centre Medical Crowley id29877 View details Canada Healthcare / Pharma — pending
    Ransomware Executive Coach id29878 View details United States Services — pending
    Ransomware Mackay Sugar id29879 View details Australia Agriculture / Food — pending
    Ransomware SigmaControl id29880 View details Netherlands Manufacturing / Engineering — pending
    Ransomware Buratti id29881 View details Italy Manufacturing / Engineering — pending
    Ransomware National Museum id29882 View details Denmark Public Sector — pending
    Ransomware Times Software id29883 View details Singapore IT — pending
    Ransomware Traublinger id29884 View details Germany Manufacturing / Engineering — pending
    Ransomware Fecovita id29885 View details Argentina Healthcare / Pharma — pending
    Ransomware Constructions Piraino id29886 View details France Other — pending
    Ransomware Kozminski University id29887 View details Poland Education — pending
    Ransomware Cole Manufacturing id29888 View details United States Manufacturing / Engineering — pending
    Ransomware Maine Oxy id29889 View details United States IT — pending
    Ransomware Buechel Stone id29890 View details United States Construction / Real Estate — pending
    Ransomware UiTM Holdings id29795 View details Malaysia Finance / Legal / Insurance — pending
    Ransomware Scenic Hudson id29796 View details United States NGOs / Associations — pending
    Ransomware Silmquinas e Equipamentos id29797 View details Brazil Manufacturing / Engineering — pending
    Ransomware Tokabei Japan id29798 View details Japan Other — pending
    Ransomware Allensbach Volunteer id29799 View details Germany NGOs / Associations — pending
    Ransomware IP Rings id29667 View details Ireland IT — pending
    Ransomware Central Arkansas Pediatrics id29668 View details United States Healthcare / Pharma — pending
    Ransomware Metroply id29669 View details — Construction / Real Estate — pending
    Ransomware Tress id29670 View details United States Retail / E-commerce — pending
    Ransomware Institucion Cervantes id29671 View details Argentina Education — pending
    Ransomware Empty id29672 View details Spain Other — pending
    Ransomware Jyharn Electronic id29673 View details Taiwan, Province of China IT — pending
    Ransomware Trigon America id29674 View details United States Manufacturing / Engineering — pending
    Ransomware FESCO Adecco id29675 View details Russian Federation Transportation / Travel / Logistics — pending
    Ransomware The Clinic id29676 View details United Kingdom Healthcare / Pharma — pending
    Ransomware Integrated Distribution id29677 View details United Kingdom IT — pending
    Ransomware Yao Yuan Technology id29678 View details Taiwan, Province of China Retail / E-commerce — pending
    Ransomware Goldlion id29679 View details Hong Kong Manufacturing / Engineering — pending
    Ransomware Danzo Group id29680 View details Japan Transportation / Travel / Logistics — pending
    Ransomware WCM Remedium id29681 View details Poland Healthcare / Pharma — pending
    Ransomware M Rocha J Serra Lda id29600 View details Portugal IT — pending
    Ransomware Anandji Haridas id29601 View details India Construction / Real Estate — pending
    Ransomware Arabian Procession Holding id29602 View details Saudi Arabia Energy — pending
    Ransomware Smile Siam Printing Service id29603 View details Thailand Hospitality / Food & Beverage / Tourism — pending
    Ransomware Fibrenoire id29604 View details Canada Telecommunications — pending
    Ransomware Brian Jessel BMW id29605 View details United States Retail / E-commerce — pending
    Ransomware Harrell Martin Peace id29606 View details United States Finance / Legal / Insurance — pending
    Ransomware Computime Group id29607 View details Hong Kong Manufacturing / Engineering — pending
    Ransomware Bouri Group id29608 View details Tunisia IT — pending