the gentlemen
ransomware group · aka The Gentlemen · unknown · active since 2026-09-04 (first leak-site post tracked by this dashboard; earlier public reporting on the group: unknown)
Victims · 7d
30▲6 vs prev. week
Victims · 30d
153active targets
Victims · 90d
400
All-time (tracked)
919since 2025-09-09
Last post
09-14 20:03UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
The Gentlemen is a ransomware and data-extortion group that posts victim names on a public leak site and threatens to publish stolen data. In a burst of activity, this dashboard recorded 24 claimed victims between 2026-09-04 and 2026-09-09, spanning healthcare, aviation, retail, construction, manufacturing, and travel across North America, South America, Europe, and Asia. Recent press coverage links the group to attacks on electronic health records vendor Veradigm and hospital operator Nutex Health, in which patient data was reported stolen and threatened for release. Public reporting on the group's origins, affiliate model, and initial access techniques is limited, and no specific CVEs are widely attributed to it. Whether it is a newly emerged operation or a rebrand of an existing gang is unknown.
Tactics & tooling
- Runs a public leak site naming victims and threatening to publish stolen data
- Double extortion: data theft paired with leak threats; patient data cited in reported healthcare incidents
- Described in press coverage as a ransomware gang; encryption behavior not publicly documented
- High-velocity victim claiming: 24 posts within roughly one week (this dashboard, 2026)
- Broad multi-region, multi-sector targeting, including healthcare organizations holding patient/EHR data
- Initial access vector, tooling, and affiliate model: unknown
Targeted sectors
HealthcareHealthcare IT / electronic health recordsPharmaceuticals / biotechnologyAviationRetail / groceryConstructionManufacturingTravel / tourism
Notable public victims
Air Canada, Veradigm, Nutex Health, PharmaEssentia Corporation, Yapı Merkezi, Metro, Superstore, Ritz Safety, AbacoViaggi, Comin Sac
Estimated earnings
No public figure.
Leak-site victims919 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Copamarina Beach Resort | · Feb 15, 2026 | — |
| Futue Bath | · Feb 13, 2026 | — |
| LSA International | · Feb 13, 2026 | — |
| Gruppo Avanti | · Feb 13, 2026 | — |
| Yash Highvoltage Insulators Pvt | · Feb 13, 2026 | — |
| City of New Castle | · Feb 13, 2026 | — |
| Nile Air Information | · Feb 13, 2026 | — |
| Smart Glass | · Feb 13, 2026 | — |
| White Beach Hotel | · Feb 13, 2026 | — |
| Autostrad Rent a Car | · Feb 13, 2026 | — |
| Emirates National Group | · Feb 12, 2026 | — |
| WCT Holdings Berhad | · Feb 11, 2026 | — |
| Erg Otoyol | · Feb 11, 2026 | — |
| Thammasat University | · Feb 11, 2026 | — |
| Ghana Bauxite Energy, Utilities & Waste | · Feb 11, 2026 | — |
| Clark Foam Products | · Feb 11, 2026 | — |
| Smartply Europe | · Feb 11, 2026 | — |
| Instituto Nacional de Derechos Humanos | · Feb 11, 2026 | — |
| UniFil | · Feb 11, 2026 | — |
| NFT Technology | · Feb 11, 2026 | — |
| Museu do Caramulo | · Feb 11, 2026 | — |
| Agis Civil Engineering Construction | · Feb 11, 2026 | — |
| Fgf Colleges & Universities | · Feb 11, 2026 | — |
| Infinite Tiers Group | · Feb 10, 2026 | — |
| Silvi SRL | · Feb 10, 2026 | — |
| Marina Home Interiors | · Feb 10, 2026 | — |
| Nishiyama Seisakusho | · Feb 10, 2026 | — |
| BAM - Brand Art Media | · Feb 10, 2026 | — |
| Gady Family | · Feb 10, 2026 | — |
| Dome Partners | · Feb 10, 2026 | — |
| Chonburi Provincial Administration | · Feb 10, 2026 | — |
| Torus | · Feb 10, 2026 | — |
| PLUS Malaysia Berhad | · Feb 10, 2026 | — |
| EXIM Bank | · Feb 10, 2026 | — |
| Ankara-İzmir | · Feb 10, 2026 | — |
| Trace | · Feb 10, 2026 | — |
| CPQ Ingenieros | · Feb 10, 2026 | — |
| Hafa | · Feb 10, 2026 | — |
| Novetex Textiles | · Feb 10, 2026 | — |
| Wells Fargo | · Feb 10, 2026 | — |
| L'Aeroclub | · Feb 10, 2026 | — |
| Area Limpia | · Feb 10, 2026 | — |
| KlearNow.AI | · Feb 10, 2026 | — |
| Thin Red Line | · Feb 4, 2026 | — |
| Handsome Manufacturing | · Jan 31, 2026 | — |
| Nobel Hygiene Pvt | · Jan 31, 2026 | — |
| Wieson Technologies | · Jan 31, 2026 | — |
| Abatix | · Jan 31, 2026 | — |
| Lawsoft | · Jan 31, 2026 | — |
| Hydrometrics | · Jan 31, 2026 | — |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .