1. Executive summary On 2026-11-12 the extortion group calling itself thegentlemen posted I-Mas Informatica S.L. (imas.es), a Spanish IT services company
1. Executive summary The ransomware and extortion group calling itself thegentlemen posted Sielke, a Hamburg-based paper, packaging and home-goods company, to its leak site
1. Executive summary The ransomware group calling itself "thegentlemen" listed JJS Justice (Janet, Janet & Suggs, LLC), a US plaintiff-side law firm, on
1. Executive summary The ransomware group "thegentlemen" listed Engineers Ireland, the country's national professional body for engineers, on its leak site on
1. Executive summary On 2026-10-09 the ransomware.live leak site listed Deloitte (US) as a victim of the group calling itself "thegentlemen"
1. Executive summary A ransomware group calling itself "thegentlemen" listed Refako Autodele (refako.dk), a Danish truck and trailer parts retailer based in Odense,
1. Executive summary A ransomware group tracked as "thegentlemen" listed SAS H2O MICHEL, a French commissaire de justice firm based in Tours and Chinon
1. Executive summary A ransomware group calling itself "thegentlemen" listed Westrop Primary & Nursery School, a state-funded community school in Highworth, Swindon (Wiltshire,
1. Executive summary On 2026-09-30 the ransomware leak site "thegentlemen" listed Williamson Dacar Associates, a GB-registered entity, as a victim. The
1. Executive summary The ransomware and extortion group calling itself "thegentlemen" listed Agospap, a French non-profit benefits administrator for roughly 150,000 AP-
1. Executive summary The ransomware and extortion group tracked as "thegentlemen" listed Defencebit, a UK-registered boutique cybersecurity consultancy, on its leak site on
1. Executive summary On 7 September 2026, the ransomware group self-identifying as "thegentlemen" listed the University of San Francisco (US) as a victim