We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Thegentlemen

Active

Track Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 1056 Known published victims in this dataset
First discovered 2025-09-09 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 228 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 15 1.4%
  • Pending 1041 98.6%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 4h ago tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
    Leak location 2 Onion service Down checked 4h ago i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion

    Top Activity Sectors (21)

    Victims (1056)

    Search, filter and paginate the victim timeline for Thegentlemen. Showing 801–900 of 1056.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware MicroChem id27443 View details Portugal Manufacturing / Engineering pending
    Ransomware Cerio id27442 View details Taiwan, Province of China IT pending
    Ransomware Vexin Normand id27408 View details France Finance / Legal / Insurance pending
    Ransomware GPAINNOVA id27407 View details Spain Manufacturing / Engineering pending
    Ransomware 2LG Prod id27406 View details France Manufacturing / Engineering pending
    Ransomware Excellentiam id27405 View details Colombia Services pending
    Ransomware Economia id27404 View details Czechia Finance / Legal / Insurance pending
    Ransomware Caribbean Medical Center id27363 View details Puerto Rico Healthcare / Pharma pending
    Ransomware Centro de Especialidades id27361 View details Spain Healthcare / Pharma pending
    Ransomware Cortporation Colina id27360 View details Chile Education pending
    Ransomware Kabelovna Kabex id27359 View details Czechia Energy pending
    Ransomware Payap University id27358 View details Thailand Education pending
    Ransomware Canal Capital id27357 View details United States Public Sector pending
    Ransomware Chase Asia id27356 View details Japan Finance / Legal / Insurance pending
    Ransomware BCN Medical id27355 View details Spain Healthcare / Pharma pending
    Ransomware Einstein Technology id27299 View details Australia IT pending
    Ransomware St Fabian Catholic id27298 View details United States Education pending
    Ransomware ControlGMC id27297 View details Canada Agriculture / Food pending
    Ransomware Docaret id27242 View details France IT pending
    Ransomware eDevice id27209 View details France Healthcare / Pharma pending
    Ransomware Nenplas id27208 View details United Kingdom Manufacturing / Engineering pending
    Ransomware Kpropha id27207 View details Tunisia Communication / Marketing pending
    Ransomware Sodimatel Fasteners id27206 View details France Services pending
    Ransomware Cosmesia id27205 View details Thailand Communication / Marketing pending
    Ransomware Grupo San Jacinto id27204 View details Peru Agriculture / Food pending
    Ransomware Nephrology Associates id27144 View details United States Communication / Marketing pending
    Ransomware Malia Group id27143 View details Lebanon Communication / Marketing pending
    Ransomware LAF Hotel Aree id27142 View details Thailand Hospitality / Food & Beverage / Tourism pending
    Ransomware Gerleinco id27141 View details Colombia Transportation / Travel / Logistics pending
    Ransomware Primus id27064 View details Thailand Communication / Marketing pending
    Ransomware Comtec 2000 id27063 View details Romania Communication / Marketing pending
    Ransomware Reanthong Partcenter id27062 View details Thailand Communication / Marketing pending
    Ransomware CHS Villach id27022 View details Austria Education pending
    Ransomware Afezo id26960 View details Netherlands Construction / Real Estate pending
    Ransomware Ricopia id26959 View details Spain IT pending
    Ransomware All India Minerals id26958 View details India Communication / Marketing pending
    Ransomware Labtician Ophthalmics id26957 View details Canada Communication / Marketing pending
    Ransomware Special Shapes Refractory id26956 View details United States Communication / Marketing pending
    Ransomware Grand Hotel id26906 View details Taiwan, Province of China Hospitality / Food & Beverage / Tourism pending
    Ransomware Sejlstrup id26905 View details Denmark Communication / Marketing pending
    Ransomware Thg id26904 View details United Kingdom Services pending
    Ransomware Fundao Para id26903 View details Brazil Communication / Marketing pending
    Ransomware Zabun id26878 View details Türkiye Communication / Marketing pending
    Ransomware Sando Tech id26877 View details United States IT pending
    Ransomware ACFA id26876 View details Canada Communication / Marketing pending
    Ransomware Amata id26875 View details Thailand Manufacturing / Engineering pending
    Ransomware Universidade Federal de Sergipe id26874 View details Brazil Public Sector pending
    Ransomware SATO id26847 View details Greece Communication / Marketing pending
    Ransomware REDACTED id26846 View details — Other pending
    Ransomware Advanced Connection Corporation id26845 View details Japan IT pending
    Ransomware OCEANIST ENGINEERING id26844 View details India Manufacturing / Engineering pending
    Ransomware Boutique Harley-Davidson id26842 View details France Retail / E-commerce pending
    Ransomware Silvestres id26841 View details United States Communication / Marketing pending
    Ransomware Nathalin Group id26840 View details Thailand Transportation / Travel / Logistics pending
    Ransomware Ruamjai id26810 View details Thailand Healthcare / Pharma pending
    Ransomware MUST Informatique id26809 View details Switzerland Healthcare / Pharma pending
    Ransomware OKJ Group id26808 View details Finland Hospitality / Food & Beverage / Tourism pending
    Ransomware Smartbytes id26807 View details India IT pending
    Ransomware Industrias Iberia id26806 View details Spain Agriculture / Food pending
    Ransomware El IBR id26805 View details Spain IT pending
    Ransomware Dos id26804 View details Thailand Communication / Marketing pending
    Ransomware Global Trust Advisors id26803 View details United States Services pending
    Ransomware Wachendorff id26802 View details Germany Manufacturing / Engineering pending
    Ransomware Silver Lake Medical Center id26773 View details United States Healthcare / Pharma pending
    Ransomware True Value id26716 View details United States Communication / Marketing pending
    Ransomware Pollo Cibao id26715 View details Dominican Republic Communication / Marketing pending
    Ransomware Sasin Colleges & Universities id26714 View details Thailand Education pending
    Ransomware Line Up Korea id26713 View details Korea, Republic of Communication / Marketing pending
    Ransomware Seac id26712 View details Italy Services pending
    Ransomware Qingtian Express Co. id26711 View details Taiwan, Province of China Transportation / Travel / Logistics pending
    Ransomware Garuda Indonesia Airlines id26710 View details Indonesia Transportation / Travel / Logistics pending
    Ransomware Grupo Progresso id26709 View details Brazil Communication / Marketing pending
    Ransomware Sawafi id26708 View details Saudi Arabia Energy pending
    Ransomware HUGS Insurance id26707 View details Thailand Finance / Legal / Insurance pending
    Ransomware Perfumeria Pigmento id26706 View details Argentina Retail / E-commerce pending
    Ransomware Comdat Datasystems id26575 View details Germany Communication / Marketing pending
    Ransomware CROSS JEANS Zakrt id26574 View details Poland Retail / E-commerce pending
    Ransomware BITS "Business Information Technology Solutions" id26573 View details Germany IT pending
    Ransomware Intsika Yethu Municipality Government id26572 View details South Africa Public Sector pending
    Ransomware Global Group id26571 View details India Construction / Real Estate pending
    Ransomware Copamarina Beach Resort id26570 View details Puerto Rico Hospitality / Food & Beverage / Tourism pending
    Ransomware Oceania Gas Chemicals & Related Products id26569 View details Samoa Energy pending
    Ransomware White Beach Hotel id26490 View details Philippines Hospitality / Food & Beverage / Tourism pending
    Ransomware Futue Bath id26489 View details Spain Communication / Marketing pending
    Ransomware LSA International id26488 View details United Kingdom Communication / Marketing pending
    Ransomware Gruppo Avanti id26487 View details Italy Communication / Marketing pending
    Ransomware Yash Highvoltage Insulators Pvt id26483 View details India Communication / Marketing pending
    Ransomware City of New Castle id26482 View details United States Public Sector pending
    Ransomware Nile Air Information id26481 View details Egypt Transportation / Travel / Logistics pending
    Ransomware Smart Glass id26480 View details Egypt Communication / Marketing pending
    Ransomware Autostrad Rent a Car id26475 View details United Arab Emirates Communication / Marketing pending
    Ransomware Emirates National Group id26470 View details United Arab Emirates Communication / Marketing pending
    Ransomware WCT Holdings Berhad id26448 View details Malaysia Construction / Real Estate pending
    Ransomware Erg Otoyol id26447 View details Türkiye Communication / Marketing pending
    Ransomware Thammasat University id26446 View details Thailand Education pending
    Ransomware Ghana Bauxite Energy, Utilities & Waste id26445 View details Ghana Energy pending
    Ransomware Clark Foam Products id26444 View details United States Communication / Marketing pending
    Ransomware Smartply Europe id26405 View details Ireland Communication / Marketing pending
    Ransomware Instituto Nacional de Derechos Humanos id26404 View details Chile Communication / Marketing pending
    Ransomware UniFil id26403 View details Brazil Communication / Marketing pending