Ransomware dossier

TheGentlemen

A newer high-volume crew that surged through 2026 across multiple sectors.

Claimed victims

645

Top region

US

Top sector

Manufacturing

Suspected origin

Unattributed

Latest claimed victims

Victims as claimed by the group on its leak site and tracked in our graph — claims are not independently verified, and listing here is not confirmation a breach occurred.

DateOrganisation (claimed)SectorCountry
2026-10-04Center State EngineeringManufacturingUS
2026-10-03AwareTechnologyUS
2026-10-03WOOSHIN SAFETY SYSTEMS CO LTDManufacturingKR
2026-10-03ZelhamNot Found—
2026-10-03Hospital de la Santa Creu i Sant PauHealthcareES
2026-10-03RotamacManufacturingCA
2026-10-03Mandurah State Emergency ServiceGovernment & DefenseAU
2026-10-03Westrop Primary & Nursery SchoolEducationGB
2026-10-03Gerrity StoneManufacturingUS
2026-09-30LegalWiseProfessional ServicesZA

Regions targeted

US 135GB 33DE 32IT 28FR 25IN 24BR 19MX 18

Sectors targeted

Manufacturing 121Technology 77Professional Services 73Healthcare 61Retail & E-Commerce 39Agriculture and Food Production 34

Track it daily

Ransomware moves every day. So does our paper.

The Probably Fine Daily is our morning threat-intelligence briefing — new victims, new groups, what actually matters, in plain English. Free.

Read today's Daily →Browse the archive

Defender-oriented threat intelligence. Nothing here assists an attack. Attribution and lineage reflect open-source reporting.

← All ransomware groups