We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1056 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 228 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 15 1.4%
  • Pending 1041 98.6%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 3h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 3h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (21)

    Victims (1056)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 601–700 of 1056.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware National Industries id29609 View details India Manufacturing / Engineering — pending
    Ransomware Soniva Dental id29610 View details Pakistan Healthcare / Pharma — pending
    Ransomware Suburban Water id29611 View details United States Energy — pending
    Ransomware Downriver Medical Associates id29612 View details United States Healthcare / Pharma — pending
    Ransomware Soja de Portugal id29613 View details Portugal IT — pending
    Ransomware TeLoh id29614 View details Germany IT — pending
    Ransomware Liztex Guatemala id29615 View details Guatemala Retail / E-commerce — pending
    Ransomware 3E Accounting id29616 View details Singapore Finance / Legal / Insurance — pending
    Ransomware Kunal Enterprises id29617 View details India Manufacturing / Engineering — pending
    Ransomware Edgewood Surgical Hospital id29618 View details United States Healthcare / Pharma — pending
    Ransomware Thoresen Thai Agencies id29619 View details Thailand Transportation / Travel / Logistics — pending
    Ransomware Michigan Surgical Center id29620 View details United States Healthcare / Pharma — pending
    Ransomware Mayelia Automotive id29413 View details Mexico Manufacturing / Engineering — pending
    Ransomware Techmar id29414 View details United Kingdom Services — pending
    Ransomware Grupo Premier id29415 View details Mexico Agriculture / Food — pending
    Ransomware Fonderia Corra id29416 View details Italy Manufacturing / Engineering — pending
    Ransomware Heartland Growers id29417 View details United States Retail / E-commerce — pending
    Ransomware Corporacion Prokompra id29418 View details Venezuela, Bolivarian Republic of Manufacturing / Engineering — pending
    Ransomware Seeley Office Systems id29339 View details Australia Services — pending
    Ransomware Le Perreux sur Marne id29340 View details France Public Sector — pending
    Ransomware Sanatorio Delta id29341 View details Argentina Healthcare / Pharma — pending
    Ransomware Hussey Seatway id29342 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Caka Grup Lojistik id29343 View details Türkiye Manufacturing / Engineering — pending
    Ransomware TRANSSYSTEM Group id29344 View details Poland Manufacturing / Engineering — pending
    Ransomware ACAM Systemautomation id29345 View details Austria Manufacturing / Engineering — pending
    Ransomware Koa Glass id29346 View details Japan Healthcare / Pharma — pending
    Ransomware Openmind Networks id29347 View details — Telecommunications — pending
    Ransomware Grupo Pasquel id29296 View details Ecuador Construction / Real Estate — pending
    Ransomware MBM Corp id29297 View details United States Services — pending
    Ransomware YMCA of Columbia id29298 View details United States NGOs / Associations — pending
    Ransomware Internal Medicine id29238 View details United States Healthcare / Pharma — pending
    Ransomware Polyrack id29239 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Internet Technologies Designs id29240 View details France Telecommunications — pending
    Ransomware E-Control Systems id29241 View details Austria Healthcare / Pharma — pending
    Ransomware DEVO-Tech id29242 View details Switzerland Construction / Real Estate — pending
    Ransomware Modern Display id29243 View details United States Retail / E-commerce — pending
    Ransomware University of Finance and Administration id29244 View details Czechia Education — pending
    Ransomware Ross Yerger Insurance id29191 View details United States Finance / Legal / Insurance — pending
    Ransomware Instituut voor de Nederlandse id29156 View details Netherlands Other — pending
    Ransomware Grupo Alvorada id29157 View details Brazil Agriculture / Food — pending
    Ransomware Ponisch Abogados id29158 View details Mexico Finance / Legal / Insurance — pending
    Ransomware Digiprint id29159 View details Poland Manufacturing / Engineering — pending
    Ransomware Focus Design Partners id29104 View details Qatar Healthcare / Pharma — pending
    Ransomware Shajarpak Securities id29105 View details Iran, Islamic Republic of Other — pending
    Ransomware Qatar National Broadband id29106 View details Qatar Public Sector — pending
    Ransomware Electroban SAE id29107 View details Paraguay Manufacturing / Engineering — pending
    Ransomware Oriental Diamond id29108 View details Japan Manufacturing / Engineering — pending
    Ransomware SETCAR id29109 View details Tunisia Manufacturing / Engineering — pending
    Ransomware Value Exchange International id29110 View details Hong Kong Retail / E-commerce — pending
    Ransomware Dodson & Horrell id29111 View details United Kingdom Agriculture / Food — pending
    Ransomware Amstel Securities id29112 View details Netherlands Finance / Legal / Insurance — pending
    Ransomware GeTeCe id29113 View details Germany Manufacturing / Engineering — pending
    Ransomware DermaPharm id28984 View details Denmark Manufacturing / Engineering — pending
    Ransomware Hillside Lumber id28985 View details United States Construction / Real Estate — pending
    Ransomware DEVCO id28986 View details Poland Construction / Real Estate — pending
    Ransomware CHX Express id28987 View details Venezuela, Bolivarian Republic of Manufacturing / Engineering — pending
    Ransomware Arizona Professional Painting id28988 View details United States Healthcare / Pharma — pending
    Ransomware McCarthy id28989 View details United States Public Sector — pending
    Ransomware VeriCon id28990 View details Netherlands Construction / Real Estate — pending
    Ransomware KUPER id28991 View details Germany Manufacturing / Engineering — pending
    Ransomware TDS id28992 View details United States Telecommunications — pending
    Ransomware Misr Chemical Industries id28993 View details Egypt Manufacturing / Engineering — pending
    Ransomware Nrt India id28897 View details India Healthcare / Pharma — pending
    Ransomware Da Guan Technology id28898 View details Taiwan, Province of China IT — pending
    Ransomware Riggotts id28899 View details United Kingdom Construction / Real Estate — pending
    Ransomware IPE id28900 View details Italy Manufacturing / Engineering — pending
    Ransomware Gator Cases id28901 View details United States Manufacturing / Engineering — pending
    Ransomware DATAMATIC id28902 View details Italy IT — pending
    Ransomware C2O Architects id28903 View details Belgium Construction / Real Estate — pending
    Ransomware FMS id28904 View details United States IT — pending
    Ransomware Clark Fixture Technologies id28905 View details United States Manufacturing / Engineering — pending
    Ransomware Manhattan Fire Safety Corp id28906 View details United States Construction / Real Estate — pending
    Ransomware Worralls id28907 View details New Zealand Finance / Legal / Insurance — pending
    Ransomware Mundo Amtae id28908 View details Mexico Services — pending
    Ransomware Heinrich Kopp id28797 View details Germany Manufacturing / Engineering — pending
    Ransomware Nostrum id28798 View details Japan Retail / E-commerce — pending
    Ransomware MIMS id28799 View details Singapore Healthcare / Pharma — pending
    Ransomware IT Management id28800 View details Thailand IT — pending
    Ransomware Colegio Notre Dame Campinas id28801 View details Brazil Education — pending
    Ransomware Beaconhouse School System id28802 View details Pakistan Education — pending
    Ransomware Heatherwood Golf Club id28803 View details United Kingdom IT — pending
    Ransomware ACFA Regionale de Calgary id28804 View details Canada NGOs / Associations — pending
    Ransomware Fabritius id28805 View details Belgium Construction / Real Estate — pending
    Ransomware Forsheda Stlverktyg id28806 View details Sweden Manufacturing / Engineering — pending
    Ransomware Magisterial Service id28807 View details Papua New Guinea Public Sector — pending
    Ransomware Kınık Gross id28808 View details Türkiye Retail / E-commerce — pending
    Ransomware Arcelik id28809 View details Türkiye IT — pending
    Ransomware Media Consulting id28810 View details Italy IT — pending
    Ransomware Keretapi Tanah id28811 View details Malaysia Transportation / Travel / Logistics — pending
    Ransomware Triquim id28812 View details Argentina Healthcare / Pharma — pending
    Ransomware Engineered Advantage id28813 View details United States Services — pending
    Ransomware The Modern Flour Mill id28814 View details — Agriculture / Food — pending
    Ransomware East id28815 View details Japan IT — pending
    Ransomware Millennium Partners id28816 View details United States Finance / Legal / Insurance — pending
    Ransomware Ontario Physiotherapy Association id28817 View details Canada NGOs / Associations — pending
    Ransomware Levante Living id28818 View details Italy Healthcare / Pharma — pending
    Ransomware Kasapreko id28819 View details Ghana Manufacturing / Engineering — pending
    Ransomware Marutake id28820 View details Japan Agriculture / Food — pending
    Ransomware Mediaplex id28821 View details Canada Manufacturing / Engineering — pending
    Ransomware Diviso Grupo Financiero id28822 View details Peru Finance / Legal / Insurance — pending