thegentlemen
Also known as: Storm-2697First seen September 9, 2025Active1,002 claimed victims
The claims below are reproduced as posted by thegentlemen on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The Gentlemen is a RaaS group that emerged in July–August 2025, rapidly claiming over 320 victims across 17+ countries by offering affiliates a 90% revenue share, deploying a Go-based locker against Windows, Linux, NAS, and BSD systems; a compromised C2 server in 2026 revealed more than 1,570 linked victims.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| AirQ | October 16, 2026 | ransomware_live | — |
| First Dental Health | October 16, 2026 | ransomware_live | — |
| Gio Dental Med Spa | October 16, 2026 | ransomware_live | — |
| Wellington College International School Bangkok | October 16, 2026 | ransomware_live | — |
| Ecuadors National Police | October 14, 2026 | ransomware_live | — |
| Santa Barbara Endodontics | October 14, 2026 | ransomware_live | — |
| Shared Medical Technology | October 14, 2026 | ransomware_live | — |
| Tulsat | October 14, 2026 | ransomware_live | — |
| Newport Beach Dentistry | October 14, 2026 | ransomware_live | — |
| Campbell Rhea | October 14, 2026 | ransomware_live | — |
| Universidade de Passo Fundo | October 14, 2026 | ransomware_live | — |
| CLIMEDI | October 14, 2026 | ransomware_live | — |
| Taiwan Otsuka Pharmaceutical | October 14, 2026 | ransomware_live | — |
| Europ Assistance South Africa | October 14, 2026 | ransomware_live | — |
| Entry Systems Garage Doors Gates | October 14, 2026 | ransomware_live | — |
| ServiceMaster of Ottawa | October 14, 2026 | ransomware_live | — |
| JJS Justice | October 14, 2026 | ransomware_live | — |
| Sladek Partners | October 14, 2026 | ransomware_live | — |
| Pantanal Agricola | October 14, 2026 | ransomware_live | — |
| St Peters Anglican Primary School | October 14, 2026 | ransomware_live | — |
| CAS Paper Mill | October 14, 2026 | ransomware_live | — |
| Axle Logistics | October 14, 2026 | ransomware_live | — |
| Petroleum Telcom Communications | October 14, 2026 | ransomware_live | — |
| SONGWOOI | October 14, 2026 | ransomware_live | — |
| North Bridge Venture Partners | October 14, 2026 | ransomware_live | — |
| Engineers Ireland | October 14, 2026 | ransomware_live | — |
| Inovar Packaging Group | October 14, 2026 | ransomware_live | — |
| Thai Ha PCL KASET | October 14, 2026 | ransomware_live | — |
| Skin Center | October 14, 2026 | ransomware_live | — |
| Museum Siam | October 14, 2026 | ransomware_live | — |
| REGiO Nord | October 14, 2026 | ransomware_live | — |
| Netcore Unbxd | October 14, 2026 | ransomware_live | — |
| Saga University | October 14, 2026 | ransomware_live | — |
| SBI Audiovisual Medinbox | October 14, 2026 | ransomware_live | — |
| Suhai Segurana Pessoal | October 14, 2026 | ransomware_live | — |
| MAP SA | October 13, 2026 | ransomware_live | — |
| Martin LLP | October 13, 2026 | ransomware_live | — |
| KFC | October 10, 2026 | ransomware_live | — |
| MoneyGram | October 10, 2026 | ransomware_live | — |
| Confluent | October 10, 2026 | ransomware_live | — |
| BigID | October 10, 2026 | ransomware_live | — |
| Placer AI | October 10, 2026 | ransomware_live | — |
| Royal Thai Air Force | October 10, 2026 | ransomware_live | — |
| Deloitte | October 9, 2026 | ransomware_live | — |
| North Philadelphia Health System | October 7, 2026 | ransomware_live | — |
| MercyMed of Columbus | October 6, 2026 | ransomware_live | — |
| Palma | October 6, 2026 | ransomware_live | — |
| Habbas Associates | October 6, 2026 | ransomware_live | — |
| Majestic Holidays India Private Limited | October 6, 2026 | ransomware_live | — |
| All Smiles Dental of Falls Church | October 6, 2026 | ransomware_live | — |
| The Law Office of James R Walsh | October 6, 2026 | ransomware_live | — |
| Potomac Animal Hospital | October 6, 2026 | ransomware_live | — |
| Mabris | October 6, 2026 | ransomware_live | — |
| Alcoholics Anonymous | October 6, 2026 | ransomware_live | — |
| Ability Enterprise | October 6, 2026 | ransomware_live | — |
| Machine sro | October 6, 2026 | ransomware_live | — |
| Northwestern Polytechnic | October 6, 2026 | ransomware_live | — |
| Polishing Proz | October 6, 2026 | ransomware_live | — |
| Maverick Desk | October 6, 2026 | ransomware_live | — |
| Rag Electric | October 6, 2026 | ransomware_live | — |
| All Souls St Gabriels School | October 6, 2026 | ransomware_live | — |
| Ansonia Public Schools | October 6, 2026 | ransomware_live | — |
| University of Buraimi | October 6, 2026 | ransomware_live | — |
| Santee School District Foundation | October 6, 2026 | ransomware_live | — |
| Jentech Precision Industrial | October 6, 2026 | ransomware_live | — |
| PIR Sales | October 6, 2026 | ransomware_live | — |
| Asessippi Ski Resort | October 6, 2026 | ransomware_live | — |
| Husky Ltee | October 6, 2026 | ransomware_live | — |
| SAS H2O MICHEL | October 6, 2026 | ransomware_live | — |
| Refako Autodele | October 6, 2026 | ransomware_live | — |
| Skyplan Services | October 6, 2026 | ransomware_live | — |
| Kooltronic | October 6, 2026 | ransomware_live | — |
| Smart Value | October 6, 2026 | ransomware_live | — |
| Galil Engineering | October 6, 2026 | ransomware_live | — |
| TGN | October 6, 2026 | ransomware_live | — |
| Greenbrook Engineering | October 6, 2026 | ransomware_live | — |
| AnyTech365 | October 6, 2026 | ransomware_live | — |
| Aquatech | October 6, 2026 | ransomware_live | — |
| Saskatoon Tribal Council | October 5, 2026 | ransomware_live | — |
| Center State Engineering | October 3, 2026 | ransomware_live | — |
| Gerrity Stone | October 2, 2026 | ransomware_live | — |
| Westrop Primary & Nursery School | October 2, 2026 | ransomware_live | — |
| Mandurah State Emergency Service | October 2, 2026 | ransomware_live | — |
| Rotamac | October 2, 2026 | ransomware_live | — |
| Hospital de la Santa Creu i Sant Pau | October 2, 2026 | ransomware_live | — |
| Zelham | September 30, 2026 | ransomware_live | — |
| WOOSHIN SAFETY SYSTEMS CO LTD | September 30, 2026 | ransomware_live | — |
| Aware | September 30, 2026 | ransomware_live | — |
| Pulmonary Services Group | September 29, 2026 | ransomware_live | — |
| Corswarem Group | September 29, 2026 | ransomware_live | — |
| Don Hierro | September 29, 2026 | ransomware_live | — |
| Josee Bendaaa-Guerrero Asociados | September 29, 2026 | ransomware_live | — |
| VUS - The English Center | September 29, 2026 | ransomware_live | — |
| Auto Holler | September 29, 2026 | ransomware_live | — |
| Tommy Garner Air Conditioning Heating | September 29, 2026 | ransomware_live | — |
| Northern NJ Eye Institute | September 29, 2026 | ransomware_live | — |
| DBU Construction | September 29, 2026 | ransomware_live | — |
| Agospap | September 29, 2026 | ransomware_live | — |
| Williamson Dacar Associates | September 29, 2026 | ransomware_live | — |
| Custom Rx Shoppe | September 29, 2026 | ransomware_live | — |
Page 1 of 11Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).