thegentlemen

thegentlemen: Zion Contracting

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Other | Website: zioncontracting.com | zioncontracting.com Zion Contracting LLC is a trusted general contractor based in New York, specializing in complex infrastructure and transportation projects. As a certified MBE, DBE, and SBE firm, they partner with government agencies to help fulfill minority and diversity contracting goals. Their main focus is delivering essential public works projects that strengthen communities across the state | Source: https://www.ransomware.live/id/WmlvbiBDb250cmFjdGluZ0B0aGVnZW50bGVtZW4=

thegentlemen: Eva Care

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Healthcare | Website: evacare.com | Infostealer data confirmed. | evacare.com rocketreach.co/eva-care-profile_b7a227f8c53b4785 Eva Care Group is a healthcare provider specializing in the post-acute care industry, headquartered in Los Angeles, California. With over 50 years of combined experience, the company operates and manages a network of nursing homes and rehabilitation facilities. They deliver comprehensive solutions encompassing clinical, financial, operational, and environmental management to ensure high-quality patient care. | Source: https://www.ransomware.live/id/RXZhIENhcmVAdGhlZ2VudGxlbWVu

thegentlemen: Hong Kong Baptist University

Ransomware attack attributed to thegentlemen. | Country: HK | Sector: Education | Website: hkbu.edu.hk | Infostealer data confirmed. | hkbu.edu.hk zoominfo.com/c/hong-kong-baptist-university/429650952 Hong Kong Baptist University (HKBU) is a leading public research university established in 1956 in Hong Kong. It is highly regarded for its academic excellence, particularly in liberal arts, business, communication, and traditional Chinese medicine. As one of the region's eight statutory publicly funded universities, it is dedicated to fostering global citizenship and innovative research. | Source: https://www.ransomware.live/id/SG9uZyBLb25nIEJhcHRpc3QgVW5pdmVyc2l0eUB0aGVnZW50bGVtZW4=

thegentlemen: Mikel Coffee

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Retail & E-Commerce | Website: mikelcoffee.com | Infostealer data confirmed. | mikelcoffee.com zoominfo.com/c/mikel-coffee/456172290 Mikel Coffee Company is a prominent Greek coffeehouse chain that began its journey in 2008 in the city of Larissa. It has rapidly expanded into a global brand, operating a network of over 410 coffee shops across 19 different countries. The company offers a comprehensive menu of premium coffee blends, beverages, snacks, and retail products, focusing on delivering a unique and welcoming coffee experience. | Source: https://www.ransomware.live/id/TWlrZWwgQ29mZmVlQHRoZWdlbnRsZW1lbg==

thegentlemen: Canopy Support Services

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Professional Services | Website: canopysupport.ca | canopysupport.ca zoominfo.com/c/canopy-support-services/347650822 Canopy Support Services is a community-based organization in Peterborough, Ontario, dedicated to supporting individuals with intellectual and developmental disabilities. They provide a safe, welcoming environment for people, including those with Autism Spectrum Disorder, to learn new skills and achieve their personal goals. The organization empowers its clients to overcome everyday barriers, build self-confidence, and lead more independent lives | Source: https://www.ransomware.live/id/Q2Fub3B5IFN1cHBvcnQgU2VydmljZXNAdGhlZ2VudGxlbWVu

thegentlemen: NTU Alumni Club

Ransomware attack attributed to thegentlemen. | Country: SG | Sector: Education | Website: ntualumni.org.sg | ntualumni.org.sg zoominfo.com/c/ntu-alumni-club/447180090 The NTU Alumni Club is an independent association for graduates of Nanyang Technological University in Singapore. It serves as a dedicated platform for alumni to connect, network, and maintain a lifelong relationship with their alma mater. Members enjoy exclusive perks, career opportunities, and access to physical facilities like lounges and co-working spaces at their clubhouse. | Source: https://www.ransomware.live/id/TlRVIEFsdW1uaSBDbHViQHRoZWdlbnRsZW1lbg==

thegentlemen: AnMed

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: anmed.org | Infostealer data confirmed. | anmed.org zoominfo.com/c/anmed/1238269198 AnMed is an independent, not-for-profit health system founded in 1908, serving Upstate South Carolina and northeast Georgia. Its anchor facility, AnMed Medical Center, is a 461-bed acute care hospital located in Anderson, South Carolina. The network provides comprehensive medical services, including emergency care, cardiovascular surgery, advanced imaging, and specialized outpatient clinics. | Source: https://www.ransomware.live/id/QW5NZWRAdGhlZ2VudGxlbWVu

thegentlemen: Premier Pigs

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Agriculture and Food Production | Website: premierpigs.com | premierpigs.com zoominfo.com/c/premier-pigs/458500816 Grupo Premier Pigs is a family-owned agricultural company based in Spain, founded in 1992 and specializing in the swine farming industry. Operating as a major pig farming integrator, the business manages its own breeding and fattening farms alongside a dedicated feed production mill. The organization is committed to sustainable livestock practices and comprehensive agricultural management, which also includes cereal farming. | Source: https://www.ransomware.live/id/UHJlbWllciBQaWdzQHRoZWdlbnRsZW1lbg==

thegentlemen: Lancesoft India

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Technology | Website: lancesoft.in | Infostealer data confirmed. | lancesoft.in zoominfo.com/c/lancesoft-india/547301190 LanceSoft India is a key division of a global workforce solutions and IT services company founded in 2000. Based in Bengaluru, it employs thousands of professionals to deliver comprehensive staffing solutions, including temporary and permanent placements. The company connects businesses worldwide with top-tier talent across diverse industries such as IT, engineering, and healthcare. | Source: https://www.ransomware.live/id/TGFuY2Vzb2Z0IEluZGlhQHRoZWdlbnRsZW1lbg==

thegentlemen: RAK Construction

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Manufacturing | Website: rakconstruction.in | rakconstruction.in zoominfo.com/c/rak-construction/1266108608 RAK Construction is a premier construction company based in Bangalore, India, with over 20 years of industry experience. They specialize in delivering high-quality residential and commercial building projects as a leading civil contractor. The company employs a dedicated team of professionals focused on providing reliable construction and contracting services. | Source: https://www.ransomware.live/id/UkFLIENvbnN0cnVjdGlvbkB0aGVnZW50bGVtZW4=

thegentlemen: CONTAC Ingenieros

Ransomware attack attributed to thegentlemen. | Country: CL | Sector: Professional Services | Website: contac.cl | Infostealer data confirmed. | contac.cl zoominfo.com/c/contac-ingenieros-division-sistemas/372522727 Contac is a technology company based in Santiago, Chile, specializing in operations and asset management technologies. They provide comprehensive automation services and real-time information systems to help industrial clients maximize their operational performance. The company focuses on delivering custom solutions to optimize asset management, reduce costs, and improve overall system reliability. | Source: https://www.ransomware.live/id/Q09OVEFDIEluZ2VuaWVyb3NAdGhlZ2VudGxlbWVu

thegentlemen: PharmaEssentia

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Healthcare | Website: pharmaessentia.com | Infostealer data confirmed. | pharmaessentia.com zoominfo.com/c/pharmaessentia-corp/145441146 PharmaEssentia is a global biopharmaceutical innovator founded in 2003 and headquartered in Taiwan. It specializes in developing best-in-class therapies and biologics for blood disorders, hematologic cancers, and other serious diseases. The company is fully integrated and operates internationally with a strong commercial and clinical presence in the U.S., Europe, and Japan. | Press: https://emops.twse.com.tw/server-java/t05sr01_1_e?&isNew=Y&seq_no=1&spoke_time=224246&spoke_date=20260803&co_id=6446 | Source: https://www.ransomware.live/id/UGhhcm1hRXNzZW50aWFAdGhlZ2VudGxlbWVu

thegentlemen: AIMS Group

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Other | Website: aimsgroup.com | Infostealer data confirmed. | aimsgroup.com AIMS Group LLC is a major conglomerate based in Ajman, UAE, established in 2003 with a workforce of thousands. It operates primarily in the environmental services and construction sectors, specializing in infrastructure and road development. The company provides comprehensive industrial solutions, including asphalt production, building materials supply, and fleet management | Source: https://www.ransomware.live/id/QUlNUyBHcm91cEB0aGVnZW50bGVtZW4=

thegentlemen: Hartfiel Automation

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Manufacturing | Website: hartfiel.com | Infostealer data confirmed. | hartfiel.com zoominfo.com/c/hartfiel-automation-inc/27608695 Hartfiel Automation is an industrial automation company providing comprehensive manufacturing solutions like pneumatics, robotics, motion control, and hydraulics. For over 60 years, they have been a specialized high-tech provider supporting the American manufacturing sector. Headquartered in Minnesota, the company employs hundreds of professionals dedicated to engineering and optimizing production processes | Source: https://www.ransomware.live/id/SGFydGZpZWwgQXV0b21hdGlvbkB0aGVnZW50bGVtZW4=

thegentlemen: aZaaS

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Technology | Website: azaas.com | Infostealer data confirmed. | azaas.com zoominfo.com/c/azaas-pte-ltd/353475433 aZaaS is a dynamic, Singapore-based IT services company specializing in IT as a Service (ITaaS) and hybrid cloud architecture solutions. They build and operate mission-grade, secure digital services for government and enterprise clients, strictly aligned with local compliance standards like GCC and IM8. The company provides comprehensive solutions including Business Process Management (BPM), Data as a Service (DaaS), and enterprise mobility to help organizations optimize their IT infrastructure | Source: https://www.ransomware.live/id/YVphYVNAdGhlZ2VudGxlbWVu

thegentlemen: Hoang Chiropractic Center

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: hoangchiro.com | hoangchiro.com zoominfo.com/c/hoang-chiropractic-center/357138190 Hoang Chiropractic Center is a specialized healthcare clinic located in Metairie, Louisiana, led by Dr. Kim Hoang. The practice focuses on non-surgical pain relief and holistic wellness, offering services like AccuSpina spinal decompression, chiropractic adjustments, and custom orthotics. They are dedicated to helping patients relieve back pain and restore the body's natural ability to heal itself through personalized care | Source: https://www.ransomware.live/id/SG9hbmcgQ2hpcm9wcmFjdGljIENlbnRlckB0aGVnZW50bGVtZW4=

thegentlemen: Godollo

Ransomware attack attributed to thegentlemen. | Country: HU | Sector: Agriculture and Food Production | Website: godolloi.hu | godolloi.hu zoominfo.com/c/gödöll/1295448671 Gödöllő Ingatlanközpont is a leading real estate agency based in Gödöllő, Hungary, specializing in property sales, rentals, and construction in Eastern Pest County. The company offers a vast portfolio of residential and commercial properties, including apartments, family houses, land plots, and industrial spaces across Gödöllő and its surrounding towns. Established as a trusted local expert, the agency provides comprehensive real estate brokerage services to help clients navigate the regional property market | Source: https://www.ransomware.live/id/R29kb2xsb0B0aGVnZW50bGVtZW4=

thegentlemen: YY Business Solutions

Ransomware attack attributed to thegentlemen. | Sector: Other | Y&Y Business Solutions (YYB Business Solutions Inc.) is a Bronx-based company located at 169 Lincoln Avenue, Suite 208, Bronx, NY 10454, reachable at (347) 270-1283. Founded and led by Valerie and Yerlin, the firm specializes in income taxes, immigration services, business license & registration, DMV & TLC services, and document translation. The company primarily serves Spanish-speaking immigrants and small business owners, helping them navigate U.S. immigration processes and tax requirements. They are most active on Instagram (@yybsolutions) and Facebook, where they share updates and client guidance. | Source: https://www.ransomware.live/id/WVkgQnVzaW5lc3MgU29sdXRpb25zQHRoZWdlbnRsZW1lbg==

thegentlemen: Halliday Watkins Mann

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Professional Services | Website: hwmlawfirm.com | hwmlawfirm.com zoominfo.com/c/halliday--watkins--mann-pc/42929145 Halliday, Watkins & Mann, P.C. (HWM) is a Salt Lake City-based law firm founded in 1935, now operating as a fourth-generation family practice. The firm exclusively serves the mortgage banking industry, specializing in creditor remedies such as foreclosures, bankruptcies, replevins, evictions, and REO closings. With a team of 51–200 employees, HWM provides full-service legal support and title curative work to financial institutions across multiple states | Source: https://www.ransomware.live/id/SGFsbGlkYXkgV2F0a2lucyBNYW5uQHRoZWdlbnRsZW1lbg==

thegentlemen: ZS Salovnova

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Not Found | Website: zssalounova.cz | Infostealer data confirmed. | zssalounova.cz ZŠ Šalounova is a primary school located in the Vítkovice district of Ostrava, Czech Republic, operating across two buildings on Šalounova and Halasova streets. The institution provides comprehensive standard education alongside specialized programs, a wide range of extracurricular clubs, and a full school counseling facility. It actively supports student success through dedicated staff, including school psychologists, special educators, and career counselors, as well as various educational and sports projects. | Source: https://www.ransomware.live/id/WlMgU2Fsb3Zub3ZhQHRoZWdlbnRsZW1lbg==

thegentlemen: Holborn European Marketing

Ransomware attack attributed to thegentlemen. | Country: CY | Sector: Professional Services | Website: holborn.com.cy | Infostealer data confirmed. | holborn.com.cy zoominfo.com/c/holborn-european-marketing-company-ltd/462273998 Holborn European Marketing Company Limited is a Cyprus-based energy trading firm established in 1987, operating from its headquarters in Larnaca. The company specializes in purchasing crude oil and feedstocks, selling refined petroleum products, and active oil trading. It serves as a major energy supplier that fulfills local market needs in Cyprus while also maintaining a significant operational presence as a key oil products supplier in Northern Germany. | Source: https://www.ransomware.live/id/SG9sYm9ybiBFdXJvcGVhbiBNYXJrZXRpbmdAdGhlZ2VudGxlbWVu

thegentlemen: Phase Technologies

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Technology | Website: phasetechnologies.com | phasetechnologies.com zoominfo.com/c/phase-technologies-llc/92275872 Phase Technologies is a leading American manufacturer of advanced power electronics, specializing in digital phase converters, variable frequency drives (VFDs), and motor protection. Founded in 1999 and headquartered in Rapid City, South Dakota, the company engineers and assembles its products entirely in the USA. Their innovative solutions generate high-quality three-phase power from single-phase sources, maximizing energy efficiency and system reliability for industrial and agricultural applications | Source: https://www.ransomware.live/id/UGhhc2UgVGVjaG5vbG9naWVzQHRoZWdlbnRsZW1lbg==

thegentlemen: LensAss Architecten

Ransomware attack attributed to thegentlemen. | Country: BE | Sector: Professional Services | Website: lensass.be | lensass.be LensAss Architecten is a Belgian architecture studio based in Hasselt, founded in 1995 by Bart Lens. The firm centers its work on the relationship between space, light, and context, specializing in both renovation and new construction. Its portfolio spans private homes, galleries, and adaptive reuse of heritage buildings across Belgium. | Source: https://www.ransomware.live/id/TGVuc0FzcyBBcmNoaXRlY3RlbkB0aGVnZW50bGVtZW4=

thegentlemen: Vemec

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Manufacturing | Website: vemecsrl.com | vemecsrl.com zoominfo.com/c/vemec-srl/397907621 Vemec S.r.l. is a leading Italian manufacturing company founded in 1983, specializing in the design and production of mechanical components and assemblies for heavy machinery. Operating across multiple production facilities covering over 23,000 square meters in Northern Italy, the firm provides advanced metal machining, laser cutting, and structural fabrication services. With more than 40 years of experience, Vemec delivers high-precision engineering solutions to diverse industrial sectors, including mechanotextiles and heavy equipment manufacturing | Source: https://www.ransomware.live/id/VmVtZWNAdGhlZ2VudGxlbWVu

thegentlemen: Nobema

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Technology | Website: nobema.com | nobema.com zoominfo.com/c/nobema-srl/371446900 Nobema S.r.l. is an Italian family-run manufacturing company based near Turin, specializing in plastic molding and integrated industrial services since 1986. They provide end-to-end solutions ranging from custom mold design and pre-series sampling to advanced gas injection technology and mass production. The company serves diverse sectors with high-quality plastic components, uniquely combining industrial parts with niche consumer products like drumsticks | Source: https://www.ransomware.live/id/Tm9iZW1hQHRoZWdlbnRsZW1lbg==

thegentlemen: Feraboli Zootech

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Agriculture and Food Production | Website: feraboli.it | feraboli.it Feraboli Zootech is a historic Italian company operating in the livestock sector since 1880, with a heritage spanning over six generations. Based in Sospiro (Cremona), it specializes in designing and building advanced cattle barns, metal structures, and tailor-made equipment for dairy and fattening farms. The company combines traditional craftsmanship with modern automation and animal welfare solutions for professional breeders. | Source: https://www.ransomware.live/id/RmVyYWJvbGkgWm9vdGVjaEB0aGVnZW50bGVtZW4=

thegentlemen: Intranet Gov Brasil

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Government & Defense | Website: intranet.gov.br | English: intranet.gov.br "Intranet Gov Brasil" refers to the secure internal corporate network and digital portal infrastructure used by the Brazilian Federal Government (gov.br) for its civil servants and ministries. It provides restricted access to internal administrative systems, official communications, and digital public services that are hidden from the general public. The underlying IT infrastructure and cybersecurity of these portals are primarily developed and maintained by state-owned technology companies like Serpro and Dataprev. | Source: https://www.ransomware.live/id/SW50cmFuZXQgR292IEJyYXNpbEB0aGVnZW50bGVtZW4=

thegentlemen: TESI

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Not Found | Website: tesiimpianti.it | tesiimpianti.it TESI S.r.l. is an Italian industrial company founded in 1997 as a spin-off from the Falck Group, specializing in machinery for coil and sheet metal processing. The company handles the buying, selling, installation, and maintenance of complete production lines for the metallurgical sector. A core part of their business is the deep refurbishment and technological upgrading of used industrial equipment with modern electrical and hydraulic systems. | Source: https://www.ransomware.live/id/VEVTSUB0aGVnZW50bGVtZW4=

thegentlemen: National Furniture Outlet

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Retail & E-Commerce | Website: nationalfurnitureoutlet.com | nationalfurnitureoutlet.com National Furniture Outlet is a family-owned retail store in Westwego, Louisiana, serving the Greater New Orleans area for over three decades. They specialize in selling affordable living room, bedroom, and dining room furniture, as well as mattresses and appliances at highly competitive, discounted prices. The business is well-known locally for its frequent overstock sales and flexible financing options to support the community | Source: https://www.ransomware.live/id/TmF0aW9uYWwgRnVybml0dXJlIE91dGxldEB0aGVnZW50bGVtZW4=

thegentlemen: HIWIN

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Manufacturing | Website: hiwin.it | Infostealer data confirmed. | hiwin.it zoominfo.com/c/hiwin-srl/446225948 HIWIN Italia is the Italian subsidiary of the global Taiwanese corporation HIWIN Technologies, a world leader in motion control and system technology. Founded in 2013 and based in the Milan area, the company specializes in manufacturing high-precision components such as ball screws, linear guideways, industrial robots, bearings, and drive systems. They serve a wide range of high-tech industries, including semiconductor, automation, and medical equipment sectors across Southern Europe. | Press: https://emops.twse.com.tw/server-java/t05sr01_1_e?&isNew=Y&seq_no=2&spoke_time=190827&spoke_date=20260728&co_id=2049 | Source: https://www.ransomware.live/id/SElXSU5AdGhlZ2VudGxlbWVu

thegentlemen: Vitex Pharmaceuticals

Ransomware attack attributed to thegentlemen. | Sector: Healthcare | Website: vitexpharma.com | vitexpharma.com zoominfo.com/c/vitex-pharmaceuticals-pty-ltd/90505264 Vitex Pharmaceuticals is a leading Australian contract manufacturer specializing in vitamins, minerals, and nutritional complementary medicines. Founded in 1989, this wholly Australian-owned company operates one of the country's largest and most state-of-the-art pharmaceutical manufacturing facilities. Recently, the company significantly expanded its capacity by opening a massive $250 million facility in Western Sydney to supply both domestic and global markets | Source: https://www.ransomware.live/id/Vml0ZXggUGhhcm1hY2V1dGljYWxzQHRoZWdlbnRsZW1lbg==

thegentlemen: INKA Group GmbH Co

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Manufacturing | INKA Group GmbH & Co. KG is a German real estate holding company headquartered in Munich, registered in the Munich Commercial Register under HRA 99442. It specializes in leasing and renting own or leased land, buildings, and apartments, as well as managing commercial real estate on a fee or contract basis. The company operates as a closed investment and management vehicle with no public website or brand. It should not be confused with the Turkish İnka Group holding or other similarly named companies. | Source: https://www.ransomware.live/id/SU5LQSBHcm91cCBHbWJIIENvQHRoZWdlbnRsZW1lbg==

thegentlemen: DHC

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Not Found | Website: dhc.co.jp | Infostealer data confirmed. | dhc.co.jp zoominfo.com/c/dhc-corp/372590440 DHC Corporation is a prominent Japanese brand renowned for its high-quality cosmetics, dietary supplements, and health foods. Originally founded as a translation company, it achieved global success by focusing on pure, natural ingredients—most notably its signature olive oil skincare. Today, DHC is trusted worldwide for combining rigorous scientific research with effective, affordable wellness products. | Source: https://www.ransomware.live/id/REhDQHRoZWdlbnRsZW1lbg==

thegentlemen: Ponti

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Other | Website: ponti.pl | ponti.pl Ponti is a specialized automotive company based in Gdańsk, Poland, focused on the direct import, sales, and professional servicing of American vehicles. Operating as a leading expert in the US car market, the company handles everything from modern everyday models to the restoration of classic muscle cars and vintage vehicles. They provide a comprehensive range of services, including sourcing, repairing post-accident imports, and dedicated mechanical maintenance for automotive enthusiasts | Source: https://www.ransomware.live/id/UG9udGlAdGhlZ2VudGxlbWVu

thegentlemen: Axson Teknik

Ransomware attack attributed to thegentlemen. | Country: SE | Sector: Manufacturing | Website: axson.se | axson.se zoominfo.com/c/axson-teknik-ab/456419010 Axson Teknik AB is a Swedish industrial supplier based in Askim, specializing in high-quality manual and robotic welding and cutting equipment. Founded in 1984, the company provides comprehensive technical services, maintenance, and specialized training for various industrial applications. They represent leading global brands such as Fronius, Thermal Dynamics, and Orbitalum, serving as a reliable partner for the manufacturing sector | Source: https://www.ransomware.live/id/QXhzb24gVGVrbmlrQHRoZWdlbnRsZW1lbg==

thegentlemen: Groupe BPCE

Ransomware attack attributed to thegentlemen. | Country: VN | Sector: Financial Services | Website: bpce-vietnam.com | Infostealer data confirmed. | bpce-vietnam.com zoominfo.com/c/groupe-bpce/457963650 BPCE International (formerly Natixis), the Ho Chi Minh City branch of France’s second-largest banking group, Groupe BPCE. Operating in Vietnam since 1988, it is one of the country's longest-established foreign bank branches, holding a full banking license. The institution specializes in corporate and investment banking, offering specialized finance, trade solutions, and transaction processing to businesses across the region. | Source: https://www.ransomware.live/id/R3JvdXBlIEJQQ0VAdGhlZ2VudGxlbWVu

thegentlemen: Hst

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: hstechnology.com | hstechnology.com zoominfo.com/c/hst/352516154 digital platform for Healthcare Solutions Team (HST), a US-based healthcare cost-containment company now operating as Claritev. The company specializes in value-driven health plans, reference-based pricing solutions, and patient advocacy to reduce medical expenses. Through its HST Care Connect portal, it helps employers and individuals seamlessly find quality healthcare providers and optimize their medical benefits | Source: https://www.ransomware.live/id/SHN0QHRoZWdlbnRsZW1lbg==

thegentlemen: Mdj Management

Ransomware attack attributed to thegentlemen. | Sector: Other | Website: appliedbizinvest.com | appliedbizinvest.com zoominfo.com/c/mdj-management-llc/410565499 Applied Business Investments, Inc. (operating alongside MDJ Management LLC) is a private US-based management and finance consulting firm registered in Florida. Founded in the late 2000s, the company focuses on business investments, corporate management strategies, and financial advisory services. It operates as a boutique entity providing specialized support and investment structuring for various commercial projects | Source: https://www.ransomware.live/id/TWRqIE1hbmFnZW1lbnRAdGhlZ2VudGxlbWVu

thegentlemen: Control Concepts Technology

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Technology | Website: controlconceptstexas.com | controlconceptstexas.com zoominfo.com/c/control-concepts--technology/356919279 Control Concepts is a Texas-based industrial automation and electronics repair company established in 1984. They specialize in servicing, repairing, and installing AC/DC motor drives, PLCs, and industrial motor controls. Operating as a certified UL508a Panel Shop, the company also provides 24-hour emergency service, system upgrades, and custom automation solutions | Source: https://www.ransomware.live/id/Q29udHJvbCBDb25jZXB0cyBUZWNobm9sb2d5QHRoZWdlbnRsZW1lbg==

thegentlemen: TopMark Funding

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Financial Services | Website: topmarkfunding.com | Infostealer data confirmed. | topmarkfunding.com zoominfo.com/c/topmark-funding-llc/368696312 TopMark Funding is a nationwide commercial financing company specializing in fast funding solutions for semi-trucks, trailers, and heavy construction equipment. Headquartered in California, they help trucking and construction businesses acquire machinery ranging from $25,000 to $500,000. The company is recognized for providing quick approvals, flexible terms, and risk-free quotes without impacting the client's credit score | Source: https://www.ransomware.live/id/VG9wTWFyayBGdW5kaW5nQHRoZWdlbnRsZW1lbg==

thegentlemen: Philippine Savings Bank

Ransomware attack attributed to thegentlemen. | Country: PH | Sector: Financial Services | Website: psbank.com.ph | Infostealer data confirmed. | psbank.com.ph zoominfo.com/c/philippine-savings-bank/83461899 SBank is widely recognized across the Philippines for its highly accessible Auto and Home Loan programs that make vehicle and property ownership easier for everyday consumers. One of its most unique financial products is the Flexi Personal Loan, a revolving credit line that allows clients to withdraw, repay, and reuse funds flexibly | Source: https://www.ransomware.live/id/UGhpbGlwcGluZSBTYXZpbmdzIEJhbmtAdGhlZ2VudGxlbWVu

thegentlemen: Additive Manufacturing

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: additivemanufacturingllc.com | Infostealer data confirmed. | additivemanufacturingllc.com zoominfo.com/c/additive-manufacturing-llc/369228736 Additive Manufacturing LLC is a U.S.-based company headquartered in Las Vegas, Nevada, specializing in 3D printing, rapid prototyping, and short- to mid-run production of metal and plastic parts. Backed by over a century of combined industry experience, the company bridges digital fabrication and traditional manufacturing, offering services like CNC machining, production tooling, and assembly. By leveraging a global network of partners and on-demand digital factories, they ensure scalable, high-quality, and cost-effective solutions with reliable lead times | Source: https://www.ransomware.live/id/QWRkaXRpdmUgTWFudWZhY3R1cmluZ0B0aGVnZW50bGVtZW4=

thegentlemen: Pertamina

Ransomware attack attributed to thegentlemen. | Country: ID | Sector: Energy & Utilities | Website: pertamina.com | Infostealer data confirmed. | pertamina.com REV - $23.2 Billion zoominfo.com/c/pt-pertamina/191250883 Pertamina is an energy company primarily in the oil and gas sector. The company provides services for new and renewable energy, and other activities related to or supporting business activities. We have taken NDA files, HR DATA, user data, employee data, technical drawings, models, bank accounting tax legal statements, SCADA documents, confidential files, photographs of work, screenshots and much more the total data volume is more than 1.2TB+ 1200 GB+ . Pertamina is Indonesia’s state-owned integrated energy corporation, operating across upstream, downstream, gas, and renewable energy sectors. With over six decades of operation, it is a primary driver of national energy sovereignty and consistently ranks among the Fortune Global 500 companies. | Source: https://www.ransom...

thegentlemen: Okovolt Solartechnik

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Energy & Utilities | Website: oekovolt.com | oekovolt.com Ökovolt Solartechnik GmbH is an Austrian company specializing in the planning, installation, and maintenance of photovoltaic systems for private, commercial, and industrial clients. Based in Upper Austria with over 15 years of experience, the firm provides comprehensive, customized solar energy solutions to promote sustainability and energy independence. They focus on high-quality components, expert consulting, and reliable service to maximize the efficiency and lifespan of every solar project | Source: https://www.ransomware.live/id/T2tvdm9sdCBTb2xhcnRlY2huaWtAdGhlZ2VudGxlbWVu

thegentlemen: Total Auto Business Solutions

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Transportation | Website: autorepairsoftware.com | autorepairsoftware.com Total Auto Business Solutions, Inc. (TABS) is a leading provider of comprehensive shop management software, best known for its flagship product, AutoFluent. Founded in 2001 and based in Northern California, the company serves auto repair shops, tire dealers, and fleet operators across the US and Canada. Their all-in-one platform streamlines daily operations by seamlessly integrating scheduling, inventory management, accounting, and customer relationship tools into a single, user-friendly system | Source: https://www.ransomware.live/id/VG90YWwgQXV0byBCdXNpbmVzcyBTb2x1dGlvbnNAdGhlZ2VudGxlbWVu

thegentlemen: Chemco Systems

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: chemcosystems.net | chemcosystems.net zoominfo.com/c/chemco-systems-lp/39588004 Chemco Systems is a world leader in the design and manufacturing of bulk chemical storage, handling, and feed systems for air and water pollution treatment, operating since 1980. The company provides tailored engineering, fabrication, and installation services, delivering innovative and cost-effective solutions without compromising safety or quality. With decades of industry experience, Chemco Systems is committed to superior product reliability, efficient customer service, and the continuous professional growth of its team | Source: https://www.ransomware.live/id/Q2hlbWNvIFN5c3RlbXNAdGhlZ2VudGxlbWVu

thegentlemen: World Wide Fittings

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Manufacturing | Website: worldwidefittings.com | Infostealer data confirmed. | worldwidefittings.com zoominfo.com/c/world-wide-fittings-inc/42729844 World Wide Fittings, Inc. is a global manufacturer of precision-engineered steel and stainless steel hydraulic tube and pipe fittings, founded in 1950 and headquartered in Vernon Hills, Illinois. Operating from nine facilities across three continents, the company supplies over 150 million components annually to OEMs and distributors in industries like automation, manufacturing, and fluid power. With a strong focus on in-house manufacturing, strict quality control, and vast in-stock inventory, they ensure reliable, on-time delivery of specialized fittings worldwide | Source: https://www.ransomware.live/id/V29ybGQgV2lkZSBGaXR0aW5nc0B0aGVnZW50bGVtZW4=

thegentlemen: Municipalidad de San Luis

Ransomware attack attributed to thegentlemen. | Country: PE | Sector: Government & Defense | Website: munisanluis.gob.pe | Infostealer data confirmed. | munisanluis.gob.pe zoominfo.com/c/municipalidad-de-san-luis/1322909314 The District Municipality of San Luis is the local government body for the San Luis district in Lima, Peru, dedicated to promoting the integral development and well-being of its residents. Its core mission is to lead, regulate, and provide essential public services while fostering community engagement through cultural, sports, and safety programs. The municipality actively modernizes its operations, offering digital platforms for online procedures and payments to ensure efficient, accessible, and transparent governance | Source: https://www.ransomware.live/id/TXVuaWNpcGFsaWRhZCBkZSBTYW4gTHVpc0B0aGVnZW50bGVtZW4=

thegentlemen: Peachtree Group

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Other | Website: peachtreegroup.com | peachtreegroup.com zoominfo.com/c/peachtree-group/5000000011 Peachtree Group is a vertically integrated investment management firm headquartered in Atlanta, Georgia, with a history dating back to 1979. The company specializes in identifying mispriced risk and capitalizing on dislocated market opportunities across private credit, real estate, and equity investments. Managing billions in assets, Peachtree Group provides comprehensive financing solutions—including permanent loans, bridge financing, and mezzanine capital—while offering dedicated services to protect and grow its investments | Source: https://www.ransomware.live/id/UGVhY2h0cmVlIEdyb3VwQHRoZWdlbnRsZW1lbg==

thegentlemen: Known

Ransomware attack attributed to thegentlemen. | Country: IS | Sector: Technology | Website: known.is | Infostealer data confirmed. | known.is zoominfo.com/c/known/480652891 Known is an award-winning, data-driven marketing, creative, and media agency headquartered in New York. The company uniquely combines PhD data scientists with world-class creatives to deliver measurable performance and breakthrough brand strategies for major clients like Microsoft, TikTok, and Grubhub. Recognized by Ad Age and Adweek as a top-tier agency, Known is dedicated to setting a new standard for modern marketing through science-led innovation and rigorous analytics | Source: https://www.ransomware.live/id/S25vd25AdGhlZ2VudGxlbWVu

thegentlemen: Paula Fish

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Other | Website: paulafish.pl | Infostealer data confirmed. | paulafish.pl zoominfo.com/c/paula-fish/448451882 Paula Fish is a market leader in fish processing in Central Europe, headquartered in Słupsk, Poland. Founded in 1998, the company specializes in the catching, production, freezing, and storage of Baltic fish and Atlantic salmon. With a workforce of over 500 employees, it operates globally, emphasizing high-quality products, innovation, and strict environmental responsibility throughout its supply chain | Source: https://www.ransomware.live/id/UGF1bGEgRmlzaEB0aGVnZW50bGVtZW4=

thegentlemen: Amicell

Ransomware attack attributed to thegentlemen. | Country: IL | Sector: Healthcare | Website: amicell.co.il | amicell.co.il zoominfo.com/c/amicell/426539109 Amicell (Amit Industries Ltd.) is a leading Israeli manufacturer founded in 1989, specializing in custom-designed battery packs, chargers, and Battery Management Systems (BMS). Headquartered in Ashdod, the company provides advanced energy solutions for demanding sectors, including defense, medical, UAVs, robotics, and industrial applications. With over 35 years of experience, Amicell is recognized for delivering reliable, high-tech power systems tailored to complex operational requirements | Source: https://www.ransomware.live/id/QW1pY2VsbEB0aGVnZW50bGVtZW4=

thegentlemen: Efrata College of Education

Ransomware attack attributed to thegentlemen. | Country: IL | Sector: Education | Website: emef.ac.il | Infostealer data confirmed. | emef.ac.il zoominfo.com/c/efrata-college-of-education/1337375131 Emuna-Efrata Academic College is a higher education institution located formed by the merger of Efrata College of Education and Emuna College of Arts. The college offers unique bachelor's and master's degree programs focusing on education (early childhood, elementary, special, and secondary) and the arts (visual communication, theater, and fine arts). With over 40 years of experience, it is dedicated to training leading female educators and creators, providing a supportive, values-driven academic environment. | Source: https://www.ransomware.live/id/RWZyYXRhIENvbGxlZ2Ugb2YgRWR1Y2F0aW9uQHRoZWdlbnRsZW1lbg==

thegentlemen: The Municipal Chamber of Serra

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Government & Defense | Website: camaraserra.es.gov.br | camaraserra.es.gov.br The Municipal Chamber of Serra (Câmara Municipal da Serra) is the legislative body of the city of Serra, located in the state of Espírito Santo, Brazil. As the largest legislative house in the state, it is composed of elected councilors responsible for creating local laws, overseeing the executive branch, and representing the citizens' interests. The institution is committed to transparency, active public participation, and the sustainable development of the municipality through its plenary sessions and specialized committees. | Source: https://www.ransomware.live/id/VGhlIE11bmljaXBhbCBDaGFtYmVyIG9mIFNlcnJhQHRoZWdlbnRsZW1lbg==

thegentlemen: Orsima

Ransomware attack attributed to thegentlemen. | Sector: Technology | Website: orsima.com | Infostealer data confirmed. | orsima.com zoominfo.com/c/orsima/347930414 ORSIMA is a leading Algerian IT services company with over 30 years of expertise in digital transformation, data center modernization, and cybersecurity. As a strategic partner of major technology providers like Dell Technologies and Microsoft, it offers comprehensive solutions including managed services, software licensing optimization, and professional training. The company is dedicated to helping enterprises and institutions in Algeria optimize their IT infrastructure and ensure high availability and business continuity | Source: https://www.ransomware.live/id/T3JzaW1hQHRoZWdlbnRsZW1lbg==

thegentlemen: Clear Vision Signs

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Retail & E-Commerce | Website: clearvisionsigns.net | clearvisionsigns.net zoominfo.com/c/clear-vision-signs/365480092 Clear Vision Signs is a full-service architectural signage and graphics company based in Dade City, Florida, serving clients nationwide. They specialize in turnkey solutions, including wayfinding systems, ADA-compliant signage, environmental graphics, and comprehensive project management. By acting as a single trusted partner for developers and property managers, they ensure efficient, safe, and visually impactful signage programs from initial concept to final installation | Source: https://www.ransomware.live/id/Q2xlYXIgVmlzaW9uIFNpZ25zQHRoZWdlbnRsZW1lbg==

thegentlemen: Precision Concrete Pumping

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: precisionconcretepump.com | precisionconcretepump.com zoominfo.com/c/precision-concrete-pumping-inc/356699459 Precision Concrete Pumping, Inc. is an MBE-certified concrete pumping company established in 1988, with branches across New York and New Jersey. The company specializes in providing high-quality concrete pumping services, including boom pumps, line pumps, and telebelts, utilizing a modern fleet of Putzmeister and Schwing equipment. With over 25 years of experience, they serve commercial, industrial, and municipal projects throughout the Northeast, ensuring reliable performance and exceptional customer service | Source: https://www.ransomware.live/id/UHJlY2lzaW9uIENvbmNyZXRlIFB1bXBpbmdAdGhlZ2VudGxlbWVu

thegentlemen: Bater

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Other | Website: bater.pl | bater.pl zoominfo.com/c/bater-ltd/429692403 Bater is a leading Polish manufacturer of traction and stationary batteries, founded in 1990 with production facilities in Warsaw and Gliwice. The company specializes in producing high-quality battery systems for electric forklifts, reserve power, and renewable energy applications, along with recombination plugs and protective battery racks. Holding ISO 9001 and ISO 14001 certifications, Bater also provides comprehensive nationwide services, including battery assembly, maintenance, room renovation, and recycling | Source: https://www.ransomware.live/id/QmF0ZXJAdGhlZ2VudGxlbWVu

thegentlemen: Premier Fiduciary

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Financial Services | Website: premierfiduciary.com | premierfiduciary.com zoominfo.com/c/premier-fiduciary/346765473 Premier Fiduciary is a global corporate and fiduciary services provider specializing in tailored solutions for private wealth clients, family offices, and investment managers. The company offers comprehensive services, including fund administration, trustee services, corporate setup, and regulatory compliance, with a strong presence in key financial hubs like Singapore and Hong Kong. Their mission is to build long-term relationships based on trust, delivering high-quality, holistic financial and administrative support to protect and grow client legacies | Source: https://www.ransomware.live/id/UHJlbWllciBGaWR1Y2lhcnlAdGhlZ2VudGxlbWVu

thegentlemen: Preferred

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: preferredtool.com | preferredtool.com Preferred Tool & Die is a precision manufacturing company based in Shelton, Connecticut, specializing in custom metal and plastic injection molds as well as complex stamped components. The company serves demanding sectors, including the medical, electrical, consumer products, and automotive industries. Holding ISO and FDA registrations, they are committed to delivering high-quality, reliable, and innovative manufacturing solutions tailored to exact client specifications | Source: https://www.ransomware.live/id/UHJlZmVycmVkQHRoZWdlbnRsZW1lbg==

thegentlemen: Partition Specialties

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: psi3g.com | psi3g.com zoominfo.com/c/partition-specialties-inc/90587733 Partition Specialties, Inc. (PSI), founded in 1958, is a leading commercial interior contractor based in California, serving clients across California and Northern Nevada. The company specializes in tailored architectural space management solutions, including high-quality movable partitions, demountable wall systems, and acoustic dividers. With decades of expertise, PSI helps corporate, hospitality, and industrial clients optimize their interior layouts with flexible, functional, and aesthetically pleasing design products | Source: https://www.ransomware.live/id/UGFydGl0aW9uIFNwZWNpYWx0aWVzQHRoZWdlbnRsZW1lbg==

thegentlemen: CRB group

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Professional Services | Website: crbgroup.com | Infostealer data confirmed. | crbgroup.com zoominfo.com/c/crb-group-gmbh/23317692 CRB is a leading global provider of sustainable engineering, architecture, construction, and consulting solutions, primarily serving the life sciences and food & beverage industries. Headquartered in Kansas City, Missouri, the company specializes in designing and building advanced facilities, such as cell and gene therapy laboratories and high-quality food manufacturing plants. With a strong international presence, CRB is dedicated to delivering innovative, safe, and efficient infrastructure that improves patient outcomes and advances scientific breakthroughs worldwide | Source: https://www.ransomware.live/id/Q1JCIGdyb3VwQHRoZWdlbnRsZW1lbg==

thegentlemen: Hutch Paving

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Transportation | Website: hutchpaving.com | hutchpaving.com zoominfo.com/c/hutch-paving-inc/38258180 Hutch Paving is a highly respected asphalt and concrete paving contractor based in Southeast Michigan, serving the region since 1993. The company specializes in comprehensive pavement solutions, including resurfacing, maintenance, sealcoating, and new construction for commercial, municipal, industrial, and residential clients. Known for its safety-first approach, modern equipment, and attention to detail, Hutch Paving is committed to delivering durable, high-quality infrastructure with exceptional customer service | Source: https://www.ransomware.live/id/SHV0Y2ggUGF2aW5nQHRoZWdlbnRsZW1lbg==

thegentlemen: OHK Energy

Ransomware attack attributed to thegentlemen. | Country: IE | Sector: Energy & Utilities | Website: ohkenergy.com | ohkenergy.com rocketreach.co/ohk-energy-profile_b6d2700bc7449e3f OHK Energy is Ireland’s largest and most trusted renewable energy provider and retrofit specialist, registered with the Sustainable Energy Authority of Ireland (SEAI). The company specializes in designing and installing solar PV, heat pumps, battery storage, and EV chargers for homeowners, businesses, farms, and communities. With a service-driven and future-focused approach, OHK Energy is dedicated to building a cleaner, more sustainable island by delivering tailored, high-quality energy solutions | Source: https://www.ransomware.live/id/T0hLIEVuZXJneUB0aGVnZW50bGVtZW4=

thegentlemen: CFS

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Financial Services | Website: cfsinc.com | Infostealer data confirmed. | cfsinc.com zoominfo.com/c/cfs-inc/12944410 CFS Inc. is a Massachusetts-based marketing support services company with over 30 years of experience in print management, direct mail, kitting, promotional items, and fulfillment. Acting as a single-source solution, they handle projects from initial design to final execution, helping businesses streamline their marketing and logistical operations. The company is known for its flexible, customer-centric approach and a strong commitment to delivering high-quality, reliable results for clients of all sizes | Source: https://www.ransomware.live/id/Q0ZTQHRoZWdlbnRsZW1lbg==

thegentlemen: Acosta Sons

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Agriculture and Food Production | Website: acostaandsons.com | acostaandsons.com zoominfo.com/c/acosta--sons-inc/398811105 Acosta and Sons is a family-owned appliance sales and repair company based in The Bronx, New York, with additional locations serving the broader New York area. They specialize in providing a wide range of home appliances at discounted prices, catering to both individual customers and property management or landlord accounts. The company is known for its reliable customer service, offering comprehensive solutions from appliance sales to professional repair and maintenance. | Source: https://www.ransomware.live/id/QWNvc3RhIFNvbnNAdGhlZ2VudGxlbWVu

thegentlemen: Saturn Industries

Ransomware attack attributed to thegentlemen. | Sector: Manufacturing | Website: saturnind.com | saturnind.com zoominfo.com/c/saturn-industries-ltd/348367401 Saturn Industries, based in Winnipeg, Manitoba, is a specialized manufacturer of custom-engineered trailers and overhead lifting products. Operating as a division of BROCK LEMKO Inc., the company serves demanding sectors such as construction, marine, powerline, mining, and aerospace. Since 1996, they have built a strong reputation for designing and fabricating tailored solutions, including dump trailers, lifting beams, and personnel baskets. Their focus remains on durability, safety, and delivering highly customized industrial equipment to meet specific client applications | Source: https://www.ransomware.live/id/U2F0dXJuIEluZHVzdHJpZXNAdGhlZ2VudGxlbWVu

thegentlemen: Kosh Innovations

Ransomware attack attributed to thegentlemen. | Sector: Not Found | Website: koshinnovations.com | Infostealer data confirmed. | koshinnovations.com zoominfo.com/c/kosh-innovations/369426368 Kosh Innovations, established in 2008 in Pondicherry, India, is a leading manufacturing solutions provider specializing in precision engineering, plastic moulding, sheet metal components, and electronic manufacturing services (EMS). Certified with IATF 16949 and multiple ISO standards, the company serves diverse sectors including automotive, consumer durables, green-tech, and healthcare. With a strategic presence across six locations in India, Kosh Innovations is committed to delivering customized, sustainable, and high-quality products through a customer-centric and innovative approach | Source: https://www.ransomware.live/id/S29zaCBJbm5vdmF0aW9uc0B0aGVnZW50bGVtZW4=

thegentlemen: Krafman

Ransomware attack attributed to thegentlemen. | Country: SE | Sector: Manufacturing | Website: krafman.se | Infostealer data confirmed. | krafman.se Krafman (operated by Krafguard AB) is a Swedish credit reporting and debt collection service provider licensed and supervised by the Swedish Authority for Privacy Protection (IMY). The platform offers fast, on-demand credit checks for both businesses and private individuals without registering the number of inquiries made. It also provides free basic company searches, active credit monitoring with automatic updates, and transparent pricing with no hidden subscription fees | Source: https://www.ransomware.live/id/S3JhZm1hbkB0aGVnZW50bGVtZW4=

thegentlemen: Salama Medicals Distributors Private

Ransomware attack attributed to thegentlemen. | Country: TZ | Sector: Healthcare | Website: salamapharma.co.tz | Infostealer data confirmed. | salamapharma.co.tz zoominfo.com/c/salama-medicals-distributors-private-ltd/356160819 Salama Pharmaceuticals Limited is Tanzania’s leading importer and distributor of pharmaceuticals, medical devices, and surgical equipment. Headquartered in Dar es Salaam, the company operates a large multi-warehouse distribution network to serve healthcare facilities across the country. Dedicated to enhancing healthcare outcomes, Salama Pharma focuses on supplying quality medical products and supporting the modernization of healthcare operations in the East African region | Source: https://www.ransomware.live/id/U2FsYW1hIE1lZGljYWxzIERpc3RyaWJ1dG9ycyBQcml2YXRlQHRoZWdlbnRsZW1lbg==

thegentlemen: Salem Saleh Babgi

Ransomware attack attributed to thegentlemen. | Country: SA | Sector: Not Found | Website: babgi.com.sa | Infostealer data confirmed. | babgi.com.sa zoominfo.com/c/salem-saleh-babgi-co-ltd/372739058 Babgi Group, founded in 1978 by Sheikh Salem Saleh Babgi, is a major Saudi Arabian conglomerate with over 1,900 employees and revenues exceeding $7.4 billion. The group operates primarily in the automotive sector (as an exclusive dealer for brands like Toyota, Lexus, and MG), trading, and contracting. Guided by a vision of sustainable economic growth, it focuses on delivering high-quality standards, advanced management practices, and community-driven services across the Kingdom | Source: https://www.ransomware.live/id/U2FsZW0gU2FsZWggQmFiZ2lAdGhlZ2VudGxlbWVu

thegentlemen: Kenaitze Indian Tribe

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Government & Defense | Website: kenaitze.org | kenaitze.org The Kenaitze Indian Tribe is a federally recognized sovereign nation of the Kahtnuht'ana Dena'ina people located on Alaska's Kenai Peninsula. Its core mission is "to assure Kahtnuht'ana Dena'ina thrive forever" through holistic, culturally grounded support. The Tribe operates the Dena'ina Wellness Center, providing comprehensive medical, dental, and behavioral health services, alongside education, elder care, and tribal fisheries to preserve their heritage and promote community well-being | Source: https://www.ransomware.live/id/S2VuYWl0emUgSW5kaWFuIFRyaWJlQHRoZWdlbnRsZW1lbg==

thegentlemen: Las Cenizas

Ransomware attack attributed to thegentlemen. | Country: CL | Sector: Other | Website: cenizas.cl | Infostealer data confirmed. | cenizas.cl zoominfo.com/c/cenizas/430439098 Grupo Minero Las Cenizas, a prominent medium-scale mining company in Chile with over four decades of industry experience. The company specializes in the production of copper fines and cathodes. Its main mining operations and facilities are strategically located in Cabildo, Taltal, and Franke, Chile | Source: https://www.ransomware.live/id/TGFzIENlbml6YXNAdGhlZ2VudGxlbWVu

thegentlemen: ETA Technology Pvt

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Technology | Website: etatechnology.in | etatechnology.in zoominfo.com/c/eta-technology-pvt-ltd/432054929 ETA Technology is a Bangalore-based manufacturing company founded in 1991, specializing in the design and production of advanced welding and forging equipment. They build rotary friction welders, friction stir welding systems, electrical upsetters, and custom test rigs for critical industries like automotive, aerospace, and e-mobility. With over 1,300 machines delivered to more than 20 countries, the company is known for its engineering precision, minimal rejection rates, and reliable global support | Source: https://www.ransomware.live/id/RVRBIFRlY2hub2xvZ3kgUHZ0QHRoZWdlbnRsZW1lbg==

thegentlemen: Delkart Industries Pvt

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Manufacturing | Website: delkartindustries.com | delkartindustries.com zoominfo.com/c/delkart-industries-pvt-ltd/471455561 Delkart Industries is an Indian manufacturing company established in 2017, specializing in custom felts, automobile carpets, and noise and thermal insulation parts. The company serves the automotive, home appliance, robotics, and industrial sectors with high-quality, customized solutions. With multiple manufacturing plants across India and IATF 16949 / ISO 9001 certifications, it ensures reliability, innovation, and trusted partnerships with leading global brands | Source: https://www.ransomware.live/id/RGVsa2FydCBJbmR1c3RyaWVzIFB2dEB0aGVnZW50bGVtZW4=

thegentlemen: Malaysian Nuclear Agency

Ransomware attack attributed to thegentlemen. | Country: MY | Sector: Government & Defense | Website: nuclearmalaysia.gov.my | Infostealer data confirmed. | nuclearmalaysia.gov.my zoominfo.com/c/malaysian-nuclear-agency/459120141 The Malaysian Nuclear Agency (Nuklear Malaysia) is the leading government research and development organization in nuclear science and technology. It focuses on the peaceful application of nuclear innovations to support national development, including medical radiopharmaceuticals, food security, and industrial safety. Additionally, the agency plays a key role in radiation safety, human resource development, and the responsible management of radioactive waste in the country | Source: https://www.ransomware.live/id/TWFsYXlzaWFuIE51Y2xlYXIgQWdlbmN5QHRoZWdlbnRsZW1lbg==

thegentlemen: Promatrix

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Technology | Website: promatrixcorp.com | promatrixcorp.com zoominfo.com/c/promatrix-corp/347777611 Promatrix Corp is a rapidly growing IT consulting and outsourcing company based in New Jersey, USA. They deliver comprehensive global technology solutions, including web application development, managed IT services, and staff augmentation. The company also specializes in enterprise resource planning (SAP) support and HR outsourcing to help businesses optimize their operations and scale efficiently | Source: https://www.ransomware.live/id/UHJvbWF0cml4QHRoZWdlbnRsZW1lbg==

thegentlemen: Kontact Consortium India Pvt

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Other | Website: kontact.in | Infostealer data confirmed. | kontact.in zoominfo.com/c/kontact-consortium-india-pvt-ltd/437934184 Kontact is an Indian engineering company with over 50 years of experience, specializing in electrical and mechanical solutions for the railway, infrastructure, and industrial sectors. They provide end-to-end services, including railway rolling stock supplies, LV/MV power distribution panels, and electrical contracting, backed by a 40,000+ sq. ft. manufacturing facility. The company is recognized for its reliability and quality, holding key international certifications such as ISO 9001, IRIS, and EN 15085-2 | Source: https://www.ransomware.live/id/S29udGFjdCBDb25zb3J0aXVtIEluZGlhIFB2dEB0aGVnZW50bGVtZW4=

thegentlemen: Indus Protech Solutions

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Technology | Website: indusprotech.com | indusprotech.com zoominfo.com/c/indus-protech-solutions-ltd/1323287130 Indus Protech Solutions is a Chennai-based company specializing in comprehensive bulk MRO (Maintenance, Repair, and Operations) and supply chain services for global trade. Acting as a one-stop sourcing partner, they provide access to over 1.5 million products across 50+ categories, serving diverse sectors like defense, energy, agriculture, and pharmaceuticals. The company connects businesses with global manufacturers, ensuring assured quality, competitive pricing, and streamlined procurement for Fortune 500 companies and large corporate networks | Source: https://www.ransomware.live/id/SW5kdXMgUHJvdGVjaCBTb2x1dGlvbnNAdGhlZ2VudGxlbWVu

thegentlemen: Upanal CNC Solutions

Ransomware attack attributed to thegentlemen. | Country: PE | Sector: Manufacturing | Website: upanalcnc.com | upanalcnc.com zoominfo.com/c/upanal-cnc-solutions/370526030 Upanal CNC Solutions is an Indian company specializing in advanced metal cutting and metal forming technologies, particularly CNC machinery. Beyond supplying equipment, they provide comprehensive services including machine modernization, 24/7 technical support, and structured training programs for operators and engineers. Headquartered in Bangalore with a technical center in Chennai and an international office in Bahrain, the company serves a trusted network of over 500 clients across various manufacturing industries | Source: https://www.ransomware.live/id/VXBhbmFsIENOQyBTb2x1dGlvbnNAdGhlZ2VudGxlbWVu

thegentlemen: The Garfield County Sheriff Office

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Government & Defense | Website: garcosheriff.com | garcosheriff.com The Garfield County Sheriff's Office is the primary law enforcement agency serving Garfield County, Colorado. Its mission is to deliver exceptional service and problem-solving solutions to the community through professional, ethical, and compassionate conduct. The office provides comprehensive public safety services, including patrol, detentions, criminal investigations, and community outreach programs like "Shop with a Cop" and emergency mass notifications | Source: https://www.ransomware.live/id/VGhlIEdhcmZpZWxkIENvdW50eSBTaGVyaWZmIE9mZmljZUB0aGVnZW50bGVtZW4=

thegentlemen: Angel Hotel

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Hospitality | Website: angelpershore.co.uk | angelpershore.co.uk zoominfo.com/c/angel-hotel/1153643926 The Angel, Pershore is a historic Tudor-origin hotel and restaurant located in the heart of the market town of Pershore, Worcestershire, near the River Avon. It serves as a premier venue offering farm-to-table dining with locally sourced produce, comfortable accommodation, and a charming atmosphere. Beyond hospitality, the establishment is a vibrant community hub, regularly hosting live music, festivals, and popular annual events like Bonfire Night fireworks. | Source: https://www.ransomware.live/id/QW5nZWwgSG90ZWxAdGhlZ2VudGxlbWVu

thegentlemen: Buck Knives

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: buckknives.com | Infostealer data confirmed. | buckknives.com zoominfo.com/c/buck-knives-inc/16223110 Buck Knives is a historic American knife manufacturer founded in 1947 by Hoyt Buck, originating from a family blacksmith business dedicated to superior steel tempering. The brand revolutionized the knife industry in 1964 with the introduction of the iconic Model 110 Folding Hunter. Now headquartered in Post Falls, Idaho, this four-generation family company is renowned for its rugged durability, traditional American craftsmanship, and a lifetime "Forever Warranty" | Source: https://www.ransomware.live/id/QnVjayBLbml2ZXNAdGhlZ2VudGxlbWVu

thegentlemen: Advanced Marketing

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Professional Services | Website: advmkt.com.mx | Infostealer data confirmed. | advmkt.com.mx zoominfo.com/c/advanced-marketing/546978407 Advanced Marketing is one of Mexico's largest book distribution and publishing companies, founded in 1994. It partners with around 70 national and international publishing houses to supply major retail chains like Gandhi and Porrúa. Additionally, it operates "AMS Libros," an online store selling a wide variety of children's, art, culture, and health books. | Source: https://www.ransomware.live/id/QWR2YW5jZWQgTWFya2V0aW5nQHRoZWdlbnRsZW1lbg==

thegentlemen: SMRTR

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Technology | Website: smrtrsolutions.com | ***.com rocketreach.co/s4i-systems-profile_b5c16403f42e08fa SMRTR is a document and workflow automation company with over 20 years of experience, specializing in ERP-driven industries such as manufacturing, food & beverage, and distribution. They provide cloud-based solutions for document management, accounts payable automation, and supplier regulatory compliance. Operating as a remote-first, environmentally conscious organization, SMRTR focuses on seamless integration with existing financial and operational systems to improve efficiency and reduce manual tasks. | Source: https://www.ransomware.live/id/U01SVFJAdGhlZ2VudGxlbWVu

thegentlemen: Henry Frerk Sons

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: hfsmaterials.com | ***.com zoominfo.com/c/henry-frerk-sons-inc/44255454 Henry Frerk Sons (HFS Materials) is a premier masonry and plaster restoration supplier based in the Chicago region, with over 140 years of history. They specialize in custom matching and blending of historic mortars, concrete, and stone patching materials, alongside offering on-site volumetric ready-mix concrete services. The company provides a comprehensive range of building materials, including natural hydraulic lime, specialized cleaners, sealers, and preblended mortars for both historic preservation and new construction projects | Source: https://www.ransomware.live/id/SGVucnkgRnJlcmsgU29uc0B0aGVnZW50bGVtZW4=

thegentlemen: Raben Group

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Transportation | Website: raben-group.com | Infostealer data confirmed. | ***.com zoominfo.com/c/raben-group/350966506 Raben Group is a leading European logistics provider with Dutch roots, founded in 1931 and currently headquartered in Poznań, Poland. The company offers comprehensive transport and warehousing solutions, including road transport, contract logistics, and supply chain management across 17 European countries. With over 90 years of experience and a workforce of approximately 12,200 employees, Raben Group is recognized as a market leader focused on sustainable and efficient logistics operations | Source: https://www.ransomware.live/id/UmFiZW4gR3JvdXBAdGhlZ2VudGxlbWVu

thegentlemen: Agapit

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Other | Website: agapit.pl | Infostealer data confirmed. | ***.pl zoominfo.com/c/agapit-sp-z-oo-spk/372573662 Agapit is one of the largest suppliers of professional cleaning technology and equipment in Poland, with over 26 years of experience. The company provides comprehensive solutions, including industrial cleaning machines, robotic scrubbers, high-pressure washers, and specialized cleaning chemicals. They operate their own nationwide distribution, rental, and service network, with key locations in cities like Olsztyn, Wroclaw, and Gdynia | Source: https://www.ransomware.live/id/QWdhcGl0QHRoZWdlbnRsZW1lbg==

thegentlemen: HBS Group

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Professional Services | Website: hbsgroup.com.au | ***.com.au zoominfo.com/c/hbs-group-pty-ltd/356757625 HBS Group is a privately owned Australian company specializing in heritage restoration, conservation, and remedial construction projects. Based in Alphington, Victoria, they have over 15 years of experience delivering complex construction and stonemasonry solutions nationwide. The company is recognized as an industry leader in preserving historical buildings and executing high-quality restoration work across major Australian cities | Source: https://www.ransomware.live/id/SEJTIEdyb3VwQHRoZWdlbnRsZW1lbg==

thegentlemen: Compagnie des Caoutchoucs du Pakidie

Ransomware attack attributed to thegentlemen. | Sector: Manufacturing | Website: pakidie.com | ***.com Compagnie des Caoutchoucs du Pakidié (CCP) is a pioneering Ivorian company established in 1960, specializing in the farming, production, and processing of natural rubber. Based in Abidjan, Côte d'Ivoire, it holds the historical distinction of being the country's first entirely private rubber enterprise and currently ranks as the second-largest national producer. The company is committed to sustainable practices, exporting its high-quality rubber to major international clients while prioritizing environmental and social responsibility. | Source: https://www.ransomware.live/id/Q29tcGFnbmllIGRlcyBDYW91dGNob3VjcyBkdSBQYWtpZGllQHRoZWdlbnRsZW1lbg==

thegentlemen: Gloria Maris Groupe

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Agriculture and Food Production | Website: gloriamaris.com | ***.com zoominfo.com/c/gloria-maris-groupe/552388964 Gloria Maris is a premium aquaculture company based in France and Sardinia, specializing in the sustainable farming of high-quality fish. With facilities in Corsica, Côte d'Opale, Gravelines, and Sardinia, the company focuses on traceability, environmental respect, and controlled growth in natural marine ecosystems. They produce around 3,800 tons of responsibly farmed fish and 35 million fry annually, exporting their products to over 25 countries worldwide | Source: https://www.ransomware.live/id/R2xvcmlhIE1hcmlzIEdyb3VwZUB0aGVnZW50bGVtZW4=

thegentlemen: SICSOE

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Not Found | Website: sicsoe.fr | ***.fr zoominfo.com/c/sicsoe/359018881 SICSOE (Solution Vin Logistique) is a French wine logistics company based near Bordeaux, established in 1985. They provide comprehensive, customized logistics services for the wine industry, including winery operations, bottling, storage, and shipping. The company is recognized for its advanced technology ensuring full product traceability and its strong commitment to environmental and quality standards, including ISO 14001 certification | Source: https://www.ransomware.live/id/U0lDU09FQHRoZWdlbnRsZW1lbg==

thegentlemen: Disney Family

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Financial Services | Website: shamrock.com | This critical data breach involves Disney Family / Shamrock Holdings, the private investment firm and family office established by Roy E. Disney to manage the wealth of the Disney family branch, rather than the public Walt Disney Company. The compromised dataset, totaling over 800 GB and spanning from the 1980s to June 2026, exposes highly sensitive information across 14 critical categories, including family trusts, tax administration, and private equity fund management. Key victims include prominent figures such as Abigail Disney, Roy P. Disney, and Stanley Gold, whose personal financial records, passports, and KYC documents were leaked alongside detailed trust instruments for the "Disney Grandchildren Trusts." The breach reveals active operational data, including recent payroll records, bank reconciliations with CNB, and subscription agreements for funds like the Shamroc...

thegentlemen: Title Resources

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Financial Services | Website: titleresourcesnt.com | ***.com zoominfo.com/c/title-resources-llc/1137777688 Title Resources is a locally owned title company based in Denton, Texas, founded in 1989. They specialize in real estate transactions, comprehensive title searches, and title insurance across North Texas, including Denton, Dallas, and Collin counties. Their team of fully trained professional title officers thoroughly examines each property to identify and resolve any title issues, ensuring secure and smooth real estate closings | Source: https://www.ransomware.live/id/VGl0bGUgUmVzb3VyY2VzQHRoZWdlbnRsZW1lbg==

thegentlemen: Thialf

Ransomware attack attributed to thegentlemen. | Country: NL | Sector: Energy & Utilities | Website: thialf.nl | Infostealer data confirmed. | ***.nl zoominfo.com/c/thialf/430686423 Thialf is a world-renowned ice arena located in Heerenveen, Netherlands, often referred to as the "Cathedral of Speed Skating." It serves as the home base for the Dutch national speed skating team and hosts a wide range of ice sports, including long track and short track speed skating, figure skating, and ice hockey. Recently, it was officially confirmed as the long-track speed skating venue for the 2030 Winter Olympics. The facility is celebrated for its modern, sustainable design and its role as a major hub for both elite professional competitions and public recreational skating. | Source: https://www.ransomware.live/id/VGhpYWxmQHRoZWdlbnRsZW1lbg==

thegentlemen: Decoupe Laser Services

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Manufacturing | Website: dls-laser.com | ***.com DLS (Découpe Laser Services) is a French laser cutting specialist based in La Ravoire, specializing in precision laser cutting of steel, stainless steel, and aluminum. The company offers comprehensive metal finishing services including deburring, bending, surface treatment, tapping, and milling. With large-format cutting capabilities (6000mm x 2000mm) and over 200 tons of material stock, DLS handles everything from prototypes to very large industrial production runs. They pride themselves on reactivity and flexibility, providing quotes within 24 hours. | Source: https://www.ransomware.live/id/RGVjb3VwZSBMYXNlciBTZXJ2aWNlc0B0aGVnZW50bGVtZW4=

thegentlemen: Oldelval Oleoductos del Valle

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Energy & Utilities | Website: oldelval.com | Infostealer data confirmed. | ***.com zoominfo.com/c/oleoductos-del-valle-sa/456337922 Oldelval (Oleoductos del Valle S.A.) is a leading Argentine midstream energy company specializing in the transportation of liquid hydrocarbons. Based in Cipolletti, Río Negro, it transports over 50% of the oil produced in Argentina and approximately 80% of the oil from the Neuquén Basin. With over 60 years of history, the company focuses on sustainable operations, safety, and infrastructure maintenance, having recently extended its national concession until 2037. | Source: https://www.ransomware.live/id/T2xkZWx2YWwgT2xlb2R1Y3RvcyBkZWwgVmFsbGVAdGhlZ2VudGxlbWVu

thegentlemen: TC Printing

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Manufacturing | Website: tcprinting.com.au | ***.com.au zoominfo.com/c/tc-printing/369208765 TC Printing Australia Pty Ltd is a commercial printing and communications company based in Scoresby, Victoria, Melbourne. Established in the mid-1980s, it specializes in a comprehensive range of printing services, including offset, digital, and point-of-sale materials. The company serves diverse clients across the advertising and marketing industries, providing end-to-end solutions from graphic design to large-scale event printing | Source: https://www.ransomware.live/id/VEMgUHJpbnRpbmdAdGhlZ2VudGxlbWVu

thegentlemen: Tikona Infinet

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Technology | Website: tikona.in | Infostealer data confirmed. | ***.in rocketreach.co/tikona-profile_b5c0d28cf42e0851 Tikona Infinet Private Limited is a prominent Indian telecommunications company based in Mumbai, established in 2008. They specialize in providing high-performance wireless broadband connectivity and advanced cloud solutions. The company serves a diverse client base, including residential homes, small businesses, and large enterprises across India, with a focus on delivering reliable next-generation internet service | Source: https://www.ransomware.live/id/VGlrb25hIEluZmluZXRAdGhlZ2VudGxlbWVu

thegentlemen: GUERREIROS seguros

Ransomware attack attributed to thegentlemen. | Country: PT | Sector: Financial Services | Website: guerreiros.pt | ***.pt zoominfo.com/c/guerreiros-seguros/483718773 GUERREIROS Seguros is a professional insurance mediation company based in Faro, Portugal, operating since 1990 and officially licensed as a mediator since 1994. They specialize in a wide range of insurance solutions, including auto, health, and life insurance. With over 30 years of experience, the company focuses on helping clients manage their policies, secure competitive rates, and ensure transparent, up-to-date coverage tailored to their specific needs | Source: https://www.ransomware.live/id/R1VFUlJFSVJPUyBzZWd1cm9zQHRoZWdlbnRsZW1lbg==

thegentlemen: MK Jewelry

Ransomware attack attributed to thegentlemen. | Country: MK | Sector: Retail & E-Commerce | Website: mkjewel.com | Infostealer data confirmed. | ***.com zoominfo.com/c/mk-jewelry-inc/346982894 MK Jewelry, Inc. is a fine jewelry manufacturing and distribution company based in Midtown Manhattan, established in 1986. They specialize in producing and supplying a wide range of jewelry, including bridal and bridge collections. The company serves both independent and major retailers across the US, Canada, and the Caribbean. As a premier industry supplier, they offer extensive private label and branded diamond jewelry lines | Source: https://www.ransomware.live/id/TUsgSmV3ZWxyeUB0aGVnZW50bGVtZW4=

thegentlemen: European Design

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Other | Website: europeandesign.ca | Infostealer data confirmed. | ***.ca zoominfo.com/c/european-design/365524802 European Design Jewellery Ltd is a Toronto-based wholesale supplier serving jewellers and manufacturers across Canada. They specialize in providing a wide range of genuine and synthetic gemstones, jewellery findings, diamonds, and finished pieces. Additionally, the company supplies professional jewellery-making equipment and tools, acting as an exclusive Canadian distributor for several industry brands | Source: https://www.ransomware.live/id/RXVyb3BlYW4gRGVzaWduQHRoZWdlbnRsZW1lbg==

thegentlemen: Clarke Radiology

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Healthcare | Website: clarkeradiology.com | ***.com zoominfo.com/c/clarke-medical-imaging-center/370367094 Clarke Radiology (Clarke Medical Imaging Center) is a well-established medical imaging facility based in Montreal, Quebec, with over 40 years of experience. They provide a comprehensive range of diagnostic imaging services, including X-rays, MRI, ultrasound, mammography, bone density scans, and cortisone injections. The center is recognized for its top-of-the-line technology, rapid reporting (within 4 hours), and strong commitment to patient safety and accredited care standards | Source: https://www.ransomware.live/id/Q2xhcmtlIFJhZGlvbG9neUB0aGVnZW50bGVtZW4=

thegentlemen: Wunschkind Klinik Dr Brunbauer

Ransomware attack attributed to thegentlemen. | Country: AT | Sector: Healthcare | Website: wunschkind.at | ***.at zoominfo.com/c/wunschkind-klinik-dr-brunbauer/1320140781 We have hundreds of gigabytes of your files, including database projects, client contracts, personal data and documents, medical data, medical histories, treatment records, medical reports, and more—all of which constitute critically important information. If you do not want to face the consequences of a data breach, please contact us; otherwise, everything will be published. fertility clinic in Vienna, Austria, led by Dr. Brunbauer. Located in the city center, the clinic specializes in fertility treatments including IVF, insemination, diagnostics, hormone therapy, egg donation, and cryopreservation. It is a recognized partner clinic of Austria's IVF-Fonds program. | Source: https://www.ransomware.live/id/V3Vuc2Noa2luZCBLbGluaWsgRHIgQnJ1bmJhdWVyQHRoZWdlbnRsZW1lbg==

thegentlemen: Conecsus

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: conecsusllc.com | ***.com zoominfo.com/c/conecsus-llc/358895914 Conecsus LLC is a global "green" metals recycler and refiner founded in 1980 and headquartered in Terrell, Texas. The company specializes in processing complex industrial residues and electronic wastes, particularly those containing tin, lead, silver, gold, and copper, such as SMT solder and solder paste wastes. Recognized as the largest secondary tin-lead recycler in the Western Hemisphere, Conecsus converts these materials into reusable metal products using state-of-the-art technology. | Source: https://www.ransomware.live/id/Q29uZWNzdXNAdGhlZ2VudGxlbWVu

thegentlemen: MatTek

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: mattek.com | Infostealer data confirmed. | ***.com zoominfo.com/c/mattek-corp/109184324 MatTek Corporation is a pioneering biotechnology company founded in 1985 and headquartered in Ashland, Massachusetts, specializing in the development of innovative in vitro 3D reconstructed human tissue models. They produce advanced microtissues and cell culture products that are widely used by researchers to accelerate drug development, conduct toxicity testing, and replace traditional animal testing. Originally an independent leader in tissue engineering, the company was recently acquired by the global life science supplier Sartorius and now operates as a key part of their advanced biological models portfolio | Source: https://www.ransomware.live/id/TWF0VGVrQHRoZWdlbnRsZW1lbg==

thegentlemen: Optiforms

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: optiforms.com | ***.com zoominfo.com/c/optiforms-inc/67340558 Optiforms, Inc. is a precision manufacturing company based in Temecula, California, specializing in electroforming, CNC machining, and enhanced surface finishes. Founded in 1984, the company produces custom metal components and high-performance optical coatings for demanding applications. They primarily serve the aerospace, defense, medical, semiconductor, and specialty lighting sectors with advanced, vertically integrated manufacturing solutions. | Source: https://www.ransomware.live/id/T3B0aWZvcm1zQHRoZWdlbnRsZW1lbg==

thegentlemen: vpcgroup.com customfoam.com

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: customfoam.com | ***.com vpcgroup.com zoominfo.com/c/custom-foam-systems-ltd/31526090 Custom Foam Systems (CFS) is a leading Canadian manufacturer of fabricated and molded custom polyurethane foam components, founded in 1973 and based in Kitchener, Ontario. The company specializes in serving the automotive, healthcare, and furniture industries across North America with over 45 years of manufacturing excellence. CFS operates under ISO 9001:2015 and FDA standards, utilizing advanced product development processes and lean manufacturing systems to deliver exceptional quality and on-time performance. As a family-owned business, they have built a strong reputation for innovation, reliability, and their commitment that "every component matters." | Source: https://www.ransomware.live/id/dnBjZ3JvdXAuY29tIGN1c3RvbWZvYW0uY29tQHRoZWdlbnRsZW1lbg==

thegentlemen: Herbahaz

Ransomware attack attributed to thegentlemen. | Country: HU | Sector: Agriculture and Food Production | Website: herbahaz.hu | Infostealer data confirmed. | ***.hu zoominfo.com/c/bennovum-kft/535573660 Herbaház is a Hungarian health and wellness specialty retail chain operating multiple stores nationwide alongside an online shop. The company specializes in dietary supplements, medicinal herbs, vitamins, and a wide range of organic, vegan, and "free-from" health foods. Their mission is to promote conscious, healthy living by providing a comprehensive, one-stop destination for natural health products and wellness solutions. | Source: https://www.ransomware.live/id/SGVyYmFoYXpAdGhlZ2VudGxlbWVu

thegentlemen: Ceska filharmonie

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Other | Website: ceskafilharmonie.cz | Infostealer data confirmed. | ***.cz zoominfo.com/c/esk-filharmonie/1100523885 The Czech Philharmonic (Česká filharmonie) is one of the world's most renowned symphony orchestras, based in Prague, Czech Republic. It gave its first independent concert on January 4, 1896, under the baton of Antonín Dvořák, and has been resident at the historic Rudolfinum concert hall for over a century. The orchestra is globally celebrated for its authentic and masterful interpretations of Czech composers such as Dvořák, Smetana, and Janáček. Currently, the ensemble is led by Chief Conductor and Music Director Semyon Bychkov, continuing its legacy of artistic excellence and international touring. | Source: https://www.ransomware.live/id/Q2Vza2EgZmlsaGFybW9uaWVAdGhlZ2VudGxlbWVu

thegentlemen: Velum

Ransomware attack attributed to thegentlemen. | Sector: Technology | Website: velum.biz | Infostealer data confirmed. | ***.biz zoominfo.com/c/velum-inc/372599932 We are making some files publicly available. We have hundreds of gigabytes of your files, including database projects, client contracts, personal data, and documents. If you do not want to face the consequences of a data breach, please contact us; otherwise, everything will be published. VELUM is a French manufacturer of professional lighting solutions based in Bischoffsheim, Alsace, operating since 1975. The company specializes in designing, developing, and manufacturing custom LED lighting fixtures for both indoor and outdoor environments. As a family-owned business, VELUM provides comprehensive support, including lighting studies, technical advice, and tailored solutions for professionals across various sectors | Source: https://www.ransomware.live/id/VmVsdW1AdGhlZ2VudGxlbWVu

thegentlemen: Lenrose

Ransomware attack attributed to thegentlemen. | Country: SG | Sector: Not Found | Website: lenrose.com | ***.com zoominfo.com/c/lenrose-pty-ltd/551499069 Lenrose & Ace David Jewellery is a premier jewellery manufacturing and casting company based in Melbourne, Australia. They specialize in precious metal casting (gold, platinum, silver, and bronze), CAD services, and the production of hand-made chain products. As a full-service, multi-faceted manufacturing facility, they utilize cutting-edge technology to bring custom jewellery designs to life for their clients | Source: https://www.ransomware.live/id/TGVucm9zZUB0aGVnZW50bGVtZW4=

thegentlemen: Affinity Designs

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Other | Website: affinitydesignsllc.com | ***.com zoominfo.com/c/affinity-designs/374939106 Affinity Designs LLC is a fine jewelry wholesaler and manufacturer based in New York, specializing in the design, production, and marketing of elegant gemstone jewelry collections. The company offers a wide range of high-quality pieces crafted in 925 Sterling Silver and 10K, 14K, or 18K gold. Led by CEO Meir Sanandaji, who brings over 40 years of industry experience, the business caters to retailers seeking premium, trend-forward jewelry lines | Source: https://www.ransomware.live/id/QWZmaW5pdHkgRGVzaWduc0B0aGVnZW50bGVtZW4=

thegentlemen: DayNDay

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Other | Website: daynday.co.in | ***.co.in zoominfo.com/c/daynday/459254692 Day 'N' Day Services Private Limited is a leading integrated facility management company based in Chennai, India, established in 1987. They provide comprehensive facility management and business support services, including logistics, warehouse management, and maintenance solutions. With operations spanning across multiple locations in India and a large workforce, the company serves diverse sectors such as banking, insurance, and corporate enterprises | Source: https://www.ransomware.live/id/RGF5TkRheUB0aGVnZW50bGVtZW4=

thegentlemen: Sirl

Ransomware attack attributed to thegentlemen. | Country: PT | Sector: Not Found | Website: sirl.pt | ***.pt zoominfo.com/c/sirl/372746430 Portuguese manufacturing company founded in 1988 and headquartered in Penela, Coimbra. It specializes in producing and selling machinery and tools for the civil construction industry.Their flagship products are concrete mixers, complemented by various other construction equipment and welding tools. The company employs 51–200 people and is a recognized supplier in the European construction machinery sector | Source: https://www.ransomware.live/id/U2lybEB0aGVnZW50bGVtZW4=

thegentlemen: Ecopetrol

Ransomware attack attributed to thegentlemen. | Country: CO | Sector: Energy | Website: www.ecopetrol.com.co | $33.1 Billion. www.***.com.co ECOPETROL copetrol SA is a company organized as a public limited company, of national order, linked to the Ministry of Mines and Energy. It has operations located in the center, south, east and north of Colombia, as well as abroad. It has two refineries in Barrancabermeja and Cartagena. Through its subsidiary Cenit, specialized in hydrocarbon transportation and logistics, it owns three ports for the export and import of fuels and crude oil in Coveñas (Sucre) and Cartagena (Bolvar) with access to the Atlantic, and Tumaco (Nariño) on the Pacific. Cenit also owns most of the country's oil and multi-purpose pipelines that connect production systems with large consumption centers and maritime terminals. Ecopetrol also has a stake in the biofuels business and is present in Brazil, Mexico and the United States (Gulf of Mexico and Permian Texas). 1TB+ St...

thegentlemen: Advantage Home Health Care

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: advantagehhc.com | Infostealer data confirmed. | ***.com zoominfo.com/c/advantage-home-health-care-inc/357944466 Advantage Home Health Care, a leading Indiana-owned provider of in-home care services with over 30 years of experience.The company operates multiple locations across Indiana, serving dozens of counties with post-procedure recovery and long-term home assistance. | Source: https://www.ransomware.live/id/QWR2YW50YWdlIEhvbWUgSGVhbHRoIENhcmVAdGhlZ2VudGxlbWVu

thegentlemen: Military Sealift Command

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Transportation/Logistics | Website: sealiftcommand.com | Infostealer data confirmed. | ***.com zoominfo.com/c/military-sealift-command/149045906 We attempted to contact the managers regarding the leaked documents (ITAR documentation, personal data, cargo manifests—including ESSM shipments—vessel blueprints, and both disclosed and undisclosed information)/ We managed to reach only Jennifer Miller , Todd Phillips and Dain Costlow However, these individuals dismissed the entire matter as a joke, ignoring all warnings about leaks and the importance of internal documents, and refused to provide any contact details for anyone authorized to handle such issues or to pass the information on to management, despite the availability of conclusive evidence. If you do not get in touch in the near future, the data will be published. | Source: https://www.ransomware.live/id/TWlsaXRhcnkgU2VhbGlmdCBDb21tYW5kQHRoZWdlbnRsZW1lbg==

thegentlemen: Sunway Scientific

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Manufacturing | Website: sun-way.com.tw | Infostealer data confirmed. | ***.com.tw zoominfo.com/c/sunway-scientific-corp/456158414 SUNWAY Co., Ltd., a leading Taiwanese distributor and exclusive agent for international scientific and laboratory equipment brands (such as HETTICH, EYELA, JASCO, and SHASHIN KAGAKU). The company specializes in providing advanced laboratory solutions, including centrifuges, freeze dryers, spectrometers, and cell disruptors for research, biotech, and chemical industries. | Source: https://www.ransomware.live/id/U3Vud2F5IFNjaWVudGlmaWNAdGhlZ2VudGxlbWVu

thegentlemen: Kaneko

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Not Found | Website: kaneko-corp.co.jp | Infostealer data confirmed. | ***.co.jp zoominfo.com/c/kaneko/540044079 Japanese software company based in Itoigawa, Niigata, specializing in construction project management solutions. For over three decades, the company has developed the CDPM series, a widely recognized software for creating and managing complex construction schedules. Recently, the company has been actively driving digital transformation in the construction industry through its advanced CDPM-X64 platform, which introduces innovative features like native JSON support and comprehensive schedule analysis tools | Source: https://www.ransomware.live/id/S2FuZWtvQHRoZWdlbnRsZW1lbg==

thegentlemen: Mesto Celakovice

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Manufacturing | Website: celakovice.cz | Infostealer data confirmed. | ***.cz zoominfo.com/c/město-čelákovice/426355970 town in the Central Bohemian Region of the Czech Republic, situated on the Elbe River approximately 27 kilometers from Prague. With a population of around 12,000 residents, it serves as a local administrative and cultural hub. The official website functions as the primary municipal portal, offering citizens and visitors essential information, administrative services, news, and contact details for the local government | Source: https://www.ransomware.live/id/TWVzdG8gQ2VsYWtvdmljZUB0aGVnZW50bGVtZW4=

thegentlemen: Giraudi Group

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Manufacturing | Website: giraudi.com | Infostealer data confirmed. | ***.com zoominfo.com/c/giraudi-group/1157060956v Monaco-based company founded in 1968, specializing in the import, export, and distribution of premium meats, including exclusive Japanese Kobe and certified Black Angus beef. Under the leadership of Riccardo Giraudi, the group has expanded into a comprehensive hospitality and lifestyle brand, owning and managing over 35 restaurants worldwide, most notably the famous Beefbar. The company also operates in the lifestyle sector with fashion, art, and premium spirits, while providing global consulting and franchising services for the food and beverage industry | Source: https://www.ransomware.live/id/R2lyYXVkaSBHcm91cEB0aGVnZW50bGVtZW4=

thegentlemen: Lsn

Ransomware attack attributed to thegentlemen. | Sector: Not Found | Website: lsn.io | Infostealer data confirmed. | ***.io zoominfo.com/c/lsn/557824732 software development company specializing in tailor-made IT solutions for the insurance industry. Founded in 2008 as Logisfera Nova and rebranded in 2020, the company provides full-stack services including back-office development, UX/UI design, data science, and enterprise software architecture. Headquartered in Gdańsk, Poland, with a branch in Athens, Greece, LSN partners with leading insurance sector clients to deliver agile, business-focused, and customized technological solutions | Source: https://www.ransomware.live/id/THNuQHRoZWdlbnRsZW1lbg==

thegentlemen: Dink Co Ltd

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Not Found | Website: dink.co.jp | Infostealer data confirmed. | ***.co.jp zoominfo.com/c/dink-co-ltd/1340493249 Osaka-based Japanese company specializing in the development, design, and sale of wastewater treatment systems specifically for cardboard manufacturing plants. Originally founded as a cardboard printing ink manufacturer, the company leveraged its industry knowledge to transform into a dedicated water treatment equipment specialist in 2021. Today, their eco-friendly systems are installed and operational in over 430 factories across Japan, helping to clean industrial wastewater to safe environmental levels | Source: https://www.ransomware.live/id/RGluayBDbyBMdGRAdGhlZ2VudGxlbWVu

thegentlemen: Vignobles Toutigeac

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Agriculture and Food Production | Website: toutigeac.com | Infostealer data confirmed. | ***.com zoominfo.com/c/vignobles-toutigeac/456813413 Vignobles Toutigeac family-run wine estate located in Targon, within the Bordeaux and Entre-Deux-Mers appellations in France. Originally an ecclesiastical property managed by monks, the estate now spans approximately 42 hectares of vineyards under the guidance of Oriane and Philippe Mazeau. The winery produces classic red and white Bordeaux wines, recognized for their smooth tannins and balanced fruit profiles, successfully blending historical tradition with modern winemaking practices | Source: https://www.ransomware.live/id/Vmlnbm9ibGVzIFRvdXRpZ2VhY0B0aGVnZW50bGVtZW4=

thegentlemen: Terra Vitis

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Agriculture and Food Production | Website: terravitis.com | Infostealer data confirmed. | ***.com zoominfo.com/c/terra-vitis/447256156 French national certification for sustainable and responsible winegrowing, founded in 1998 by a group of committed Beaujolais winegrowers. It is the only national certification specifically dedicated to the wine sector and is officially recognized by the French Ministry of Agriculture and Food. The association unites nearly 2,000 members across France, guaranteeing environmentally friendly, socially responsible, and economically viable practices from vine to wine glass through strict annual audits | Source: https://www.ransomware.live/id/VGVycmEgVml0aXNAdGhlZ2VudGxlbWVu

thegentlemen: Tooltec

Ransomware attack attributed to thegentlemen. | Country: SE | Sector: Manufacturing | Website: tooltec.se | Infostealer data confirmed. | ***.se zoominfo.com/c/tooltec-ab/371817746 advanced manufacturing company based in Trollhättan, Sweden, specializing in the precision machining of complex components. The company utilizes technologies like 5-axis milling, turning, and Wire EDM to produce high-quality parts for the automotive, energy, aeronautical, and aerospace industries. As an ISO 9001 certified supplier, Tooltec is recognized for its strict quality standards, delivery reliability, and commitment to long-term partnerships with both clients and employees | Source: https://www.ransomware.live/id/VG9vbHRlY0B0aGVnZW50bGVtZW4=

thegentlemen: ALUFE Femszerkezeti Kft

Ransomware attack attributed to thegentlemen. | Country: HU | Sector: Manufacturing | Website: alufe.hu | Infostealer data confirmed. | ***.hu zoominfo.com/c/alufe-fémszerkezeti-kft/452408141 Hungarian manufacturing and construction company based in Székesfehérvár, with a history of aluminum production dating back to 1968. The company specializes in manufacturing and installing aluminum windows, doors, curtain walls, and complex facade systems, including steel, glass, and ceramic structures. With around 150 employees, it provides comprehensive, high-quality metal structure solutions for commercial and architectural projects across the region | Source: https://www.ransomware.live/id/QUxVRkUgRmVtc3plcmtlemV0aSBLZnRAdGhlZ2VudGxlbWVu

thegentlemen: Landesbibliothek Coburg

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Public Sector | Website: landesbibliothek-coburg.de | Infostealer data confirmed. | ***.de zoominfo.com/c/landesbibliothek-coburg/429940598 regional state scientific library in Bavaria, Germany, originally founded in 1547. Located in the historic Ehrenburg Palace in Coburg, it houses a vast collection of around 500,000 volumes, including rare manuscripts, incunabula, and the historical book collections of the former Dukes of Coburg. Since 1973, the library has been administered by the Free State of Bavaria, serving as a vital cultural and research institution dedicated to preserving the region's historical heritage | Source: https://www.ransomware.live/id/TGFuZGVzYmlibGlvdGhlayBDb2J1cmdAdGhlZ2VudGxlbWVu

thegentlemen: Comet Enterprise Corp

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Not Found | Website: comet-bearing.com.tw | Infostealer data confirmed. | ***.com.tw zoominfo.com/c/comet-enterprise-corp/425713239 leading Taiwanese industrial bearing distributor founded in 1973, serving as one of the major authorized distributors of the Schaeffler Group's FAG and INA brands in Taiwan. The company provides high-quality precision bearings for machine tools, power machinery, and equipment maintenance, backed by comprehensive factory technical support. With its headquarters in New Taipei City and branches across Taiwan, China, and Thailand, it offers extensive inventory and one-stop procurement solutions to help clients minimize equipment downtime and maintenance costs | Source: https://www.ransomware.live/id/Q29tZXQgRW50ZXJwcmlzZSBDb3JwQHRoZWdlbnRsZW1lbg==

thegentlemen: Metro Mondego

Ransomware attack attributed to thegentlemen. | Country: PT | Sector: Transportation/Logistics | Website: metromondego.pt | Infostealer data confirmed. | ***.pt zoominfo.com/c/metro-mondego-sa/430685182 public transport company responsible for sustainable mobility in the Coimbra, Miranda do Corvo, and Lousã region of Portugal. Originally conceived as a light rail network, the project has been restructured into a fully electric, high-capacity Bus Rapid Transit system known as Metrobus. The network spans 42 kilometers with 42 dedicated stations and 35 electric buses, designed to provide efficient, eco-friendly, and integrated urban transportation for an estimated 13 million passengers annually | Source: https://www.ransomware.live/id/TWV0cm8gTW9uZGVnb0B0aGVnZW50bGVtZW4=

thegentlemen: Hanseata

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Financial Services | Website: hanseata.de | Infostealer data confirmed. | ***.de traditional German flat glass wholesaler based near Hamburg, operating since 1953. The company specializes in supplying high-quality glass solutions, including vacuum glass, flat glass, and insulating glass, to commercial clients, architects, and construction firms worldwide. They are particularly known for their extensive stock capacity, specialized consulting for energy-efficient vacuum glazing, and comprehensive global logistics services | Source: https://www.ransomware.live/id/SGFuc2VhdGFAdGhlZ2VudGxlbWVu

thegentlemen: Customs Watch

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Public Sector | Website: customswatch.com | Infostealer data confirmed. | ***.com zoominfo.com/c/customs-watch/467458469 is an intelligence and IT consulting company specializing in anti-counterfeiting and product protection strategies throughout their lifecycle. The company primarily serves the pharmaceutical sector, working with 22 of the 25 largest pharmaceutical companies globally. Founded in 2001, it employs 51 to 200 people and is an active member of the International AntiCounterfeiting Coalition. | Source: https://www.ransomware.live/id/Q3VzdG9tcyBXYXRjaEB0aGVnZW50bGVtZW4=

thegentlemen: Gallant

Ransomware attack attributed to thegentlemen. | Country: FI | Sector: Not Found | Website: gallant.fi | Infostealer data confirmed. | ***.fi zoominfo.com/c/gallant/474332534 is a forward-looking Finnish advisory and accounting company founded in 1967. It provides comprehensive financial, HR administration, taxation, and business law solutions for businesses of all sizes. The company operates in multiple locations across Finland, aiming to keep its clients one step ahead of their competition through modern financial management and strategic support | Source: https://www.ransomware.live/id/R2FsbGFudEB0aGVnZW50bGVtZW4=

thegentlemen: Terry P Moosmann CPA PC

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Financial Services | Terry P. Moosmann CPA PC is a local accounting and tax preparation firm based in Washington, Missouri. Owned by Terry Moosmann, the company provides professional financial, accounting, and tax services tailored to individuals and small businesses in the surrounding communities. The firm is recognized for its personalized approach and long-standing presence in the local business community | Source: https://www.ransomware.live/id/VGVycnkgUCBNb29zbWFubiBDUEEgUENAdGhlZ2VudGxlbWVu

thegentlemen: Byggelit Sverige

Ransomware attack attributed to thegentlemen. | Country: SE | Sector: Construction | Website: byggelit.se | Infostealer data confirmed. | ***.se zoominfo.com/c/byggelit-sverige-ab/6046017 Swedish manufacturing company based in Lit that has been producing particleboard since 1962. They specialize in sustainable, customized particleboard component solutions, using advanced CNC technology to cut, drill, and mill panels to exact customer specifications. This approach minimizes on-site labor and waste while promoting a circular economy by recycling production scraps into new boards | Source: https://www.ransomware.live/id/QnlnZ2VsaXQgU3ZlcmlnZUB0aGVnZW50bGVtZW4=

thegentlemen: BRAC

Ransomware attack attributed to thegentlemen. | Country: BD | Sector: Business Services | Website: brac.net | Infostealer data confirmed. | ***.net zoominfo.com/c/brac-centre/8079683 is the largest non-governmental development organization in the world, founded in Bangladesh in 1972.Its mission is to empower communities facing poverty, illiteracy, disease, and social injustice.Today, it operates across multiple countries, reaching over 145 million people annually through programs in education, healthcare, livelihood, and human rights | Source: https://www.ransomware.live/id/QlJBQ0B0aGVnZW50bGVtZW4=

thegentlemen: Tangram Interiors

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Business Services | Website: www.tangraminteriors.com | www.***.com Revenue $245.1 Million Founded in 1963, At Tangram Interiors, we've spent decades transforming spaces to inspire and empower. As industry leaders, our reputation stands on top-notch craftsmanship and innovative design. Tangram Interiors is a prominent commercial interior solutions provider and Steelcase dealer, specializing in integrated workspaces, including furniture, technology, and design. Serving Southern California, the Central Valley, and Texas, the firm offers comprehensive services ranging from space planning to custom, bespoke furniture solutions. Client pesonal data included. 400+gb | Source: https://www.ransomware.live/id/VGFuZ3JhbSBJbnRlcmlvcnNAdGhlZ2VudGxlbWVu

thegentlemen: VASBE

Ransomware attack attributed to thegentlemen. | Country: RU | Sector: Business Services | Website: vasbe.com | Infostealer data confirmed. | ***.com zoominfo.com/c/vigilantes-asociados-al-servicio-de-banca-y-empresas-vasbe-sl/458305259 VASBE Vigilantes Asociados Al Servicio De Banca Y Empresas Vasbe is a well-established Spanish private security and surveillance company with over 30 years of industry experience. Based primarily in the Salamanca region, they provide comprehensive protection solutions including physical guarding, 24/7 central alarm monitoring, and advanced video surveillance. The company specializes in designing customized security plans to safeguard businesses, financial institutions, and valuable assets around the clock. | Source: https://www.ransomware.live/id/VkFTQkVAdGhlZ2VudGxlbWVu

thegentlemen: Dash Door Glass

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: dashdoor.com | Infostealer data confirmed. | ***.com Dash Door & Glass is a prominent commercial contractor and facility support specialist headquartered in Doral, Florida, with a rich history dating back to 1955. The company specializes in the supply, installation, and maintenance of commercial doors, glass, and architectural hardware for large-scale construction projects across South Florida. Operating with a dedicated team of professionals, the firm has established itself as a major industry player, generating an impressive annual revenue of approximately $113.3 million | Source: https://www.ransomware.live/id/RGFzaCBEb29yIEdsYXNzQHRoZWdlbnRsZW1lbg==

thegentlemen: BDO Greece

Ransomware attack attributed to thegentlemen. | Country: GR | Sector: Business Services | Website: bdo.gr | Infostealer data confirmed. | ***.gr zoominfo.com/c/bdo-certified-public-accountants-sa/372555588 BDO Greece is a leading Athens-based accounting, tax, and advisory firm that operates as a member of the global BDO network. The company provides comprehensive audit, assurance, and business consulting services to a diverse range of industries, including real estate, hospitality, and the public sector. Employing between 50 and 200 professionals, the firm generates an estimated annual revenue of over $23 million while helping clients navigate complex financial and regulatory landscapes | Source: https://www.ransomware.live/id/QkRPIEdyZWVjZUB0aGVnZW50bGVtZW4=

thegentlemen: Carita

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Not Found | Website: carita.com | Infostealer data confirmed. | ***.com zoominfo.com/c/carita/358348689 Carita is a prestigious French luxury skincare brand founded in 1945, renowned for its professional-grade beauty treatments and high-end cosmetics. Now part of L'Oréal's Luxury Division following its acquisition from Shiseido in 2022, the brand operates globally with a focus on exceptional skincare rituals and personalized beauty experiences. Available in over 130 countries, Carita combines innovative formulations with artisanal expertise, generating annual revenue in the range of $9-10 million for its core operations | Source: https://www.ransomware.live/id/Q2FyaXRhQHRoZWdlbnRsZW1lbg==

thegentlemen: Lopes Law

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: lopeslawllc.com | Infostealer data confirmed. | ***.com zoominfo.com/c/lopes-law-llc/449811320 Lopes Law LLC is a Philadelphia-based law firm founded by Anthony Lopes that specializes in franchise law, representing both franchisees and franchisors nationwide. The firm provides comprehensive legal services including Franchise Disclosure Document (FDD) reviews, franchise agreement negotiations, and dispute resolution using transparent flat-fee pricing. In addition to franchise expertise, the practice acts as fractional general counsel for businesses and offers specialized tax law services to help companies navigate complex legal landscapes | Source: https://www.ransomware.live/id/TG9wZXMgTGF3QHRoZWdlbnRsZW1lbg==

thegentlemen: Gene Codes Forensics

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: genecodesforensics.com | Infostealer data confirmed. | ***.com zoominfo.com/c/gene-codes-forensics-inc/1208843964 Gene Codes Forensics is a Michigan-based technology company and a global leader in disaster victim identification and human DNA matching. They provide specialized forensic software, such as Sequencher and M-FISys, which are utilized by numerous states and countries as central DNA resources for identifying remains in mass disasters. In addition to providing software and consulting services, the company operates a one-million-dollar Humanitarian Grant Program to support non-profit organizations conducting forensic DNA testing | Source: https://www.ransomware.live/id/R2VuZSBDb2RlcyBGb3JlbnNpY3NAdGhlZ2VudGxlbWVu

thegentlemen: Ferretería Scopazzo

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Consumer Services | Website: scopazzo.com.ar | Infostealer data confirmed. | ***.com.ar rocketreach.co/ferreteria-scopazzo-profile_b7dd5f00c0ca3ccc Ferretería Scopazzo is a prominent family-owned hardware and industrial tools retailer based in Buenos Aires, Argentina, boasting over 60 years of market experience.They specialize in supplying electrical, pneumatic, and household equipment from major global brands like Makita, DeWalt, and Bosch to both individuals and businesses | Source: https://www.ransomware.live/id/RmVycmV0ZXLDrWEgU2NvcGF6em9AdGhlZ2VudGxlbWVu

thegentlemen: Fortray

Ransomware attack attributed to thegentlemen. | Sector: Not Found | Website: fortray.com | Infostealer data confirmed. | ***.com zoominfo.com/c/fortray-global-services-ltd/446823730 Fortray Global Services Limited is a UK-based IT company founded in 2011 that operates across tech education, managed IT services, and global recruitment.They offer specialized Tech and AI bootcamps with 1:1 mentorship to help individuals build in-demand digital skills and launch successful tech careers.Furthermore, they act as a Managed Service Provider (MSP) delivering scalable cloud solutions and cybersecurity to businesses.Simultaneously, their recruitment division connects ambitious IT professionals with top job opportunities worldwide | Source: https://www.ransomware.live/id/Rm9ydHJheUB0aGVnZW50bGVtZW4=

thegentlemen: Martin Cava

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Consumer Services | Website: martincava.com | Infostealer data confirmed. | ***.com zoominfo.com/c/martin-cava-sa/366183664 Martin Cava S.A. is a prominent Argentine supplier of equipment, specialty papers, and consumables for the graphic and printing industry, boasting nearly 90 years of market experience.Based in Buenos Aires, they distribute a wide array of products including HP plotters, inks, holographic vinyls, and offset printing materials.The company is highly regarded for offering innovative solutions that allow businesses to personalize garments, promotional items, and various surfaces | Source: https://www.ransomware.live/id/TWFydGluIENhdmFAdGhlZ2VudGxlbWVu

thegentlemen: Aveiro Constructors Limited

Ransomware attack attributed to thegentlemen. | Country: PT | Sector: Construction | Website: aveiroconstructors.com | Infostealer data confirmed. | ***.com Aveiro Constructors Limited is a Canadian general contractor established in 1976 and headquartered in Southwestern Ontario. The company specializes in the Industrial, Commercial, and Institutional (ICI) sectors, delivering design-build, new construction, and renovation projects both locally and internationally. Originally starting with pre-engineered steel buildings, they have grown over the decades into a comprehensive construction firm offering specialized services like HVAC and project management | Source: https://www.ransomware.live/id/QXZlaXJvIENvbnN0cnVjdG9ycyBMaW1pdGVkQHRoZWdlbnRsZW1lbg==

thegentlemen: Triquesta

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Not Found | Website: triquesta.com | Infostealer data confirmed. | ***.com zoominfo.com/c/triquesta-pte-ltd/346670373 Triquesta is a Singapore-based fintech company specializing in collateral, compliance, and risk management software for structured commodity finance.Founded by seasoned banking professionals, the firm provides cutting-edge technology that helps global banks and direct lenders reliably track assets and mitigate risks.With a strong international presence across Europe and Australia, their solutions empower financial institutions to navigate complex commodity markets efficiently | Source: https://www.ransomware.live/id/VHJpcXVlc3RhQHRoZWdlbnRsZW1lbg==

thegentlemen: Vicenzi Group

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Agriculture and Food Production | Website: vicenzi.it | Infostealer data confirmed. | ***.it zoominfo.com/c/vicenzi-spa/1101977046 Vicenzi Group, founded in 1905 by Matilde Vicenzi, is a historic Italian confectionery company renowned for producing high-quality biscuits and traditional pastries. Based in Verona, the family-owned business has grown into a global brand dedicated to becoming the world leader in premium Italian sweet treats. The company employs hundreds of people and successfully combines authentic recipes with modern sustainable practices to deliver its products to international markets | Source: https://www.ransomware.live/id/VmljZW56aSBHcm91cEB0aGVnZW50bGVtZW4=

thegentlemen: Energon

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Energy | Website: energon.cz | Infostealer data confirmed. | ***.cz zoominfo.com/c/energon/430910504 ENERGON HOLDING is a prominent Czech group uniting various companies specialized in energy services, photovoltaics, and modern sustainable technologies. With over 25 years of industry experience, the group drives innovations that enhance the energy independence and competitiveness of the Czech Republic. They also actively invest in startups focused on renewable energy optimization, diagnostics, and the security of power infrastructure | Source: https://www.ransomware.live/id/RW5lcmdvbkB0aGVnZW50bGVtZW4=

thegentlemen: Open Options

Ransomware attack attributed to thegentlemen. | Country: IE | Sector: Business Services | Website: ooaccess.com | Infostealer data confirmed. | ***.com Open Options was a prominent Texas-based software company specializing in open-architecture access control solutions, best known for its flagship enterprise platform, DNA Fusion. The company focused on delivering scalable physical security and identity management software tailored to complex organizational needs. Following a strategic acquisition, the company's technology and brand were integrated into Acre Security, where it continues to operate and evolve as DNA Fusion by acre security | Source: https://www.ransomware.live/id/T3BlbiBPcHRpb25zQHRoZWdlbnRsZW1lbg==

thegentlemen: INTERNET AG

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Technology | Website: inet.de | Infostealer data confirmed. | ***.de zoominfo.com/c/inet/429716454 INTERNET AG is a professional German IT service provider specializing in reliable, sustainable, and flexible hosting and server solutions. The company delivers customized IT infrastructures, managed services, and global network connectivity tailored to complex business needs. Alongside its partner INTERNIC GmbH, it offers comprehensive enterprise software and secure digital operations for corporate clients | Source: https://www.ransomware.live/id/SU5URVJORVQgQUdAdGhlZ2VudGxlbWVu

thegentlemen: Crossroads Medical Management

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: crossroadsmedicalmgmt.com | Infostealer data confirmed. | ***.com zoominfo.com/c/crossroads-medical-management-llc/354034077 Crossroads Medical Management is a healthcare management company headquartered in Perry, Georgia, specializing in full-service financial, clinical, and operations management for the senior community. As a legacy organization with three generations of experience, they focus on providing quality-oriented care and a home-like environment across multiple affiliated skilled nursing facilities. Operating primarily in states like Georgia, the company manages several senior care centers, generating an estimated annual revenue of over $12 million while expanding to meet the evolving needs of elderly residents | Source: https://www.ransomware.live/id/Q3Jvc3Nyb2FkcyBNZWRpY2FsIE1hbmFnZW1lbnRAdGhlZ2VudGxlbWVu

thegentlemen: Pharma Wholesale

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: pharmawholesale.com | Infostealer data confirmed. | ***.com zoominfo.com/c/pharma-wholesale/353577758 Pharma Wholesale Corp. is a licensed pharmaceutical wholesaler and distributor headquartered in Florida, USA, with over 24 years of industry experience. The company specializes in the global distribution of prescription and OTC medications, vitamins, supplements, and health and beauty products. Operating as a mid-sized enterprise, they supply affordable healthcare solutions to pharmacies and medical facilities both domestically and internationally | Source: https://www.ransomware.live/id/UGhhcm1hIFdob2xlc2FsZUB0aGVnZW50bGVtZW4=

thegentlemen: Welders Supply Equipment Rentals

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Construction | Website: wserentals.com | Infostealer data confirmed. | ***.com zoominfo.com/c/welders-supply--equipment-rentals/355927450 WSE Rentals (Welders Supply & Equipment Rentals) is a specialized equipment rental company headquartered in Port Allen, Louisiana. They focus on providing a comprehensive range of high-quality, reliable welding tools and machinery from well-known industry brands for various industrial projects. The company serves contractors and businesses by offering tailored rental solutions and dedicated delivery services to support their operational needs | Source: https://www.ransomware.live/id/V2VsZGVycyBTdXBwbHkgRXF1aXBtZW50IFJlbnRhbHNAdGhlZ2VudGxlbWVu

thegentlemen: Royal Foods

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Agriculture and Food Production | Website: royalfoods.com.au | Infostealer data confirmed. | ***.com.au zoominfo.com/c/royal-foods/98011908 Royal Foods is a privately-owned Australian gourmet food company that supplies high-quality, innovative products to the food service sector and independent retailers.Headquartered in Brisbane and operating across multiple states, the company employs around 250 staff dedicated to supporting the local food industry.Furthermore, their specialized Food Solutions division focuses on helping commercial kitchens solve challenges related to profitability and operational efficiency | Source: https://www.ransomware.live/id/Um95YWwgRm9vZHNAdGhlZ2VudGxlbWVu

thegentlemen: Spedidam

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Transportation/Logistics | Website: spedidam.fr | Infostealer data confirmed. | ***.fr Spedidam, founded in 1959 by five musical performers, is a French collective management organization that protects performers' neighboring rights.The organization manages the collection and distribution of royalties for performing artists while supporting artistic and cultural initiatives.Based in Paris, it serves as one of France's key institutions for managing intellectual property rights in music and dance | Press: https://www.spedidam.fr/presse/incident-de-securite-informatique/?fbclid=IwY2xjawS4jRBleHRuA2FlbQIxMABzcnRjBmFwcF9pZBAyMjIwMzkxNzg4MjAwODkyAAEejCOcVJick3n9hfb_wzxrCYNh0dFN9c2oqDLb1CB9vTOuZj7wz2KjgiMbsfE_aem_40VHFRzEOHT66_rrPtrlgQ | Source: https://www.ransomware.live/id/U3BlZGlkYW1AdGhlZ2VudGxlbWVu

thegentlemen: hiddeenn

Ransomware attack attributed to thegentlemen. | Sector: Not Found | hidddenn | Source: https://www.ransomware.live/id/aGlkZGVlbm5AdGhlZ2VudGxlbWVu

thegentlemen: Arabia Falcon Insurance Company SAOG

Ransomware attack attributed to thegentlemen. | Country: OM | Sector: Financial Services | Website: afic.om | Infostealer data confirmed. | ***.om zoominfo.com/c/arabia-falcon-insurance-company-saog/447137751 Arabia Falcon Insurance Company (AFIC), is a leading insurance provider in Oman formed by the historic merger of two successful local insurers.The company underwrites a comprehensive range of general, motor, medical, and life insurance products for individuals and businesses.Headquartered in Muscat, AFIC has firmly established itself as a trusted and prominent name in the Sultanate's insurance sector | Source: https://www.ransomware.live/id/QXJhYmlhIEZhbGNvbiBJbnN1cmFuY2UgQ29tcGFueSBTQU9HQHRoZWdlbnRsZW1lbg==

thegentlemen: Ce Ratp Comite D entreprise Ratp

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Transportation/Logistics | Website: ceratp.fr | Infostealer data confirmed. | ***.fr zoominfo.com/c/ce-ratp-comité-dentreprise-ratp/1315531566 digital platform of the RATP Works Council, dedicated exclusively to employees of the Paris public transport operator and their beneficiaries.It provides comprehensive services for social and cultural activities, allowing members to book vacations, register for summer camps, and access exclusive leisure events.Based in Fontenay-sous-Bois, the platform serves as a central hub for managing employee benefits and corporate perks | Source: https://www.ransomware.live/id/Q2UgUmF0cCBDb21pdGUgRCBlbnRyZXByaXNlIFJhdHBAdGhlZ2VudGxlbWVu

thegentlemen: Keifert

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Not Found | Website: keifert.de | Infostealer data confirmed. | ***.de zoominfo.com/c/keifert-gmbh/429980133 Keifert GmbH master-certified building cleaning company based in Schallstadt, Germany, with over 35 years of industry experience.They offer a comprehensive range of professional services, including office, industrial, and specialized cleaning, as well as janitorial services across the Southern Baden region.As a quality-focused enterprise, the company is certified according to DIN EN ISO 9001 and 14001 standards, ensuring reliable and environmentally conscious solutions for their clients | Source: https://www.ransomware.live/id/S2VpZmVydEB0aGVnZW50bGVtZW4=

thegentlemen: Kosmos

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Energy | Website: kosmos.de | Infostealer data confirmed. | ***.de zoominfo.com/c/kosmos/470278755 Franckh-Kosmos Verlags-GmbH & Co. KG, a prominent media publishing house based in Stuttgart, Germany.Founded in 1822 by Johann Friedrich Franckh, the company is one of the leading publishers of guidebooks, children's books, board games, and educational experiment kits.It successfully combines long-standing tradition with modern trends to offer engaging products for children, families, and hobbyists | Source: https://www.ransomware.live/id/S29zbW9zQHRoZWdlbnRsZW1lbg==

thegentlemen: EBNY Development

Ransomware attack attributed to thegentlemen. | Country: EG | Sector: Construction | Website: ebny.com.eg | Infostealer data confirmed. | ***.com.eg Founded in 2012, EBNY Development is a pioneering real estate company focused on redefining the property market in Egypt and beyond. They create innovative and functional projects that combine elegant designs with thoughtful planning to elevate daily living and lifestyles. Ultimately, the company is dedicated to delivering long-lasting value and building a brighter, sustainable future for its clients | Source: https://www.ransomware.live/id/RUJOWSBEZXZlbG9wbWVudEB0aGVnZW50bGVtZW4=

thegentlemen: Tonnies Group

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Agriculture and Food Production | Website: toennies.de | Infostealer data confirmed. | ***.de zoominfo.com/c/tönnies-group/427095219 Founded in 1971 as a family-owned business, the Tönnies Group is a leading German meat processing company headquartered in Rheda-Wiedenbrück.As a major global player in the food industry, it specializes in the slaughtering, butchering, and processing of pork and beef, generating around 5 billion euros in annual turnover with over 8,000 employees.Notably, the holding company is rebranding to "Premium Food Group" starting in 2025 to emphasize its focus on sustainable food solutions | Source: https://www.ransomware.live/id/VG9ubmllcyBHcm91cEB0aGVnZW50bGVtZW4=

thegentlemen: Automovil Supply S.A

Ransomware attack attributed to thegentlemen. | Country: PY | Sector: Manufacturing | Website: supply.com.py | Infostealer data confirmed. | ***.com.py zoominfo.com/c/automóvil-supply/405948730 Automovil Supply S.A., accessible via ***.com.py, is a prominent Paraguayan chain of auto parts stores founded on August 10, 1955.With over 70 years of experience in the automotive industry, the company employs between 200 and 500 staff members and operates multiple retail branches across Paraguay.Known for its slogan "Over 70 years moving the country," it serves as a major importer and distributor of motor vehicle parts in the region | Source: https://www.ransomware.live/id/QXV0b21vdmlsIFN1cHBseSBTLkFAdGhlZ2VudGxlbWVu

thegentlemen: Excel Cell Electronic

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Manufacturing | Website: ece.com.tw | Infostealer data confirmed. | ***.com.tw zoominfo.com/c/excel-cell-electronic-co-ltd/372144382 Excel Cell Electronic Co., Ltd. (ECE), founded in 1981 and headquartered in Taichung, Taiwan, is a prominent manufacturer of electronic components.The publicly traded company specializes in producing DIP switches, micro switches, relays, terminal blocks, connectors, and resettable fuses for global markets.ECE focuses heavily on product innovation and process integration to serve as a reliable strategic partner in the fast-paced electronics industry | Source: https://www.ransomware.live/id/RXhjZWwgQ2VsbCBFbGVjdHJvbmljQHRoZWdlbnRsZW1lbg==

thegentlemen: Mercado Libre

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Technology | Website: mercadolibre.com.ar | Infostealer data confirmed. | ***.com.ar zoominfo.com/c/mercadolibre-srl/425378760 Argentine platform of MercadoLibre, the undisputed leader in Latin American e-commerce and fintech, founded in 1999 by Marcos Galperin. It operates a massive online marketplace integrated with a powerful ecosystem of services, including Mercado Pago for digital payments and Mercado Envíos for logistics. As a cornerstone of Argentina's digital economy, it connects millions of buyers and sellers, driving both retail innovation and financial inclusion across the nation | Source: https://www.ransomware.live/id/TWVyY2FkbyBMaWJyZUB0aGVnZW50bGVtZW4=

thegentlemen: CSIR Structural Engineering Research Centre

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Public Sector | Website: serc.res.in | Infostealer data confirmed. | ***.res.in zoominfo.com/c/csir-structural-engineering-research-centre/372543677 CSIR-Structural Engineering Research Centre (CSIR-SERC), a premier national laboratory established in 1965 and located in Chennai, India.Operating under the Council of Scientific and Industrial Research, the institute is dedicated to advanced research in structural engineering, materials science, and structural health monitoring.The center plays a crucial role in developing innovative construction technologies and providing specialized testing services to support India's infrastructure development | Source: https://www.ransomware.live/id/Q1NJUiBTdHJ1Y3R1cmFsIEVuZ2luZWVyaW5nIFJlc2VhcmNoIENlbnRyZUB0aGVnZW50bGVtZW4=

thegentlemen: Jump Solutions Inc

Ransomware attack attributed to thegentlemen. | Country: PH | Sector: Business Services | Website: jumpsolutions.ph | Infostealer data confirmed. | ***.ph zoominfo.com/c/jump-solutions-inc/450178976 Filipino-owned IT solutions provider and system integrator based in Makati City, Metro Manila.The company specializes in delivering comprehensive, end-to-end IT solutions, including network infrastructure assessments, IT consultancy, and risk management.As a trusted technology partner, they focus on providing future-ready and secure technologies that empower businesses across various industries | Source: https://www.ransomware.live/id/SnVtcCBTb2x1dGlvbnMgSW5jQHRoZWdlbnRsZW1lbg==

thegentlemen: MBT Energy

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Energy | Website: mbt-energy.com | Infostealer data confirmed. | ***.com zoominfo.com/c/mibet-energy/357309481 Xiamen Mibet New Energy Co., Ltd., is a high-tech enterprise based in China that specializes in one-stop solar mounting solutions and PV racking systems.The company manufactures a comprehensive range of structures for ground, rooftop, floating, tracking, carport, and agricultural solar applications. Holding over 200 global patents and an annual production capacity of 20GW+, Mibet exports its internationally certified products to more than 100 countries worldwide | Source: https://www.ransomware.live/id/TUJUIEVuZXJneUB0aGVnZW50bGVtZW4=

thegentlemen: Pro-Tech Technology

Ransomware attack attributed to thegentlemen. | Country: HK | Sector: Technology | Website: ptt-asia.com | Infostealer data confirmed. | ***.com Pro-Tech Technology (Asia) Limited,leading IT solutions provider established in 2004 with offices in Hong Kong.Operating in the Information Technology & Services industry, the company focuses on delivering secure, effective, and cost-effective IT solutions and services to its clients .With a workforce of up to 200 employees, PTT strives to provide stable technological infrastructure and support across the Asian marke | Source: https://www.ransomware.live/id/UHJvLVRlY2ggVGVjaG5vbG9neUB0aGVnZW50bGVtZW4=

thegentlemen: Technical Solutions Group

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: tsgpc.com | Infostealer data confirmed. | ***.com zoominfo.com/c/medical-data-rx/346985484 Technical Solutions Group, LLC, an IT services company headquartered in Gladwin, Michigan, which also operates the specialized division Medical Data Rx.The organization provides comprehensive technology solutions, including networking, data backup, and hardware services, assisting both small businesses and medical professionals across the United States and Canada.As a diversified technology services provider, the company focuses on delivering reliable technical support and tailored IT management to its clients | Source: https://www.ransomware.live/id/VGVjaG5pY2FsIFNvbHV0aW9ucyBHcm91cEB0aGVnZW50bGVtZW4=

thegentlemen: Virginia Historical Society

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Public Sector | Website: virginiahistory.org | Infostealer data confirmed. | ***.org zoominfo.com/c/virginia-historical-society/184942664 is the digital platform for the Virginia Museum of History & Culture, owned and operated by the Virginia Historical Society, a private non-profit established in 1831.It is uniquely positioned as the only museum that presents all of Virginia's history under one roof, covering all centuries, regions, and topics.The organization connects people to America's past through its exhibitions, educational programs, and extensive research collections, inspiring future generations | Source: https://www.ransomware.live/id/VmlyZ2luaWEgSGlzdG9yaWNhbCBTb2NpZXR5QHRoZWdlbnRsZW1lbg==

thegentlemen: LogiQuip

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Transportation/Logistics | Website: logiquip.com | Infostealer data confirmed. | ***.com zoominfo.com/c/logiquip/146752157 LogiQuip, founded in 1992, is a specialized manufacturer providing inventory management and storage solutions exclusively for the healthcare industry.They design innovative systems, such as ParWire shelving, to solve complex supply chain and distribution issues in hospitals.Ultimately, their products help medical professionals save valuable time on inventory tasks so they can focus on patient care | Source: https://www.ransomware.live/id/TG9naVF1aXBAdGhlZ2VudGxlbWVu

thegentlemen: Quanterm Logistics Sdn Bhd

Ransomware attack attributed to thegentlemen. | Country: MY | Sector: Transportation/Logistics | Website: quanterm.com | Infostealer data confirmed. | ***.com zoominfo.com/c/quanterm-logistics-sdn-bhd/346750206 Quanterm Logistics, founded in 1992 and headquartered in Malaysia, is a leading freight forwarding and total logistics provider in the Asia Pacific region.Starting as an international LCL consolidator, the company has expanded to offer comprehensive supply chain solutions including warehousing, distribution, and fleet management.Today, the organization serves both domestic and international markets through a wide network of offices across Malaysia, Vietnam, Australia, and other countries | Source: https://www.ransomware.live/id/UXVhbnRlcm0gTG9naXN0aWNzIFNkbiBCaGRAdGhlZ2VudGxlbWVu

thegentlemen: Medic Rescue

Ransomware attack attributed to thegentlemen. | Sector: Healthcare | Website: www.medicrescue.org | https://www.***.org/ https://www.zoominfo.com/c/medic-rescue/47367866 Medic Rescue Services has been providing trusted emergency medical services to Beaver County since 1978. They offer a range of services including on-site emergency care, non-emergency transports, stretcher van trips, and wheelchair van services, all available 24/7. Their dedicated team and extensive fleet ensure swift and effective responses to medical needs. Medic Rescue aims to prioritize health and safety while fostering community trust through their reliable service | Source: https://www.ransomware.live/id/TWVkaWMgUmVzY3VlQHRoZWdlbnRsZW1lbg==

thegentlemen: Shamrock Holdings Inc.

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: www.zoominfo.com | https://en.wikipedia.org/wiki/Shamrock_Holdings https://www.***.com/c/shamrock-holdings-inc/102187761 https://www.***.com/c/shamrock-capital-advisors-llc/80380310 https://www.shamrock.com/ Shamrock Holdings, Inc. is an investment firm founded by Roy E. Disney in 1978, primarily serving the investment needs of the Disney Family. The company emphasizes integrity, responsibility, and transparency in its operations. In addition to its investment activities, Shamrock manages various real estate investment programs through a subsidiary. Its intended clients include members of the Roy E. Disney Family and other potential investors in real estate. Assets Under Management: The firm manages over $6.6B in assets across entertainment IP, media rights, and private equity . Included 2021-2026 Stanley Gold inbox(80778) and sent(21617) | Source: https://www.ransomware.live/id/U2hhbXJvY2sgSG9sZ...

thegentlemen: FAC Logistique

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Transportation/Logistics | Website: fac-logistique.com | Infostealer data confirmed. | ***.com FAC Logistique, a French company founded in 1996 that specializes in the outsourcing of purchasing and logistics. Operating as a central purchasing office, the firm helps businesses optimize their supplier base, manage inventory, and significantly reduce operational costs. Headquartered in Grand-Couronne with additional agencies across France, the company leverages expert buyers to simplify supply chain processes and act as a dedicated "center of savings" for its clients | Source: https://www.ransomware.live/id/RkFDIExvZ2lzdGlxdWVAdGhlZ2VudGxlbWVu

thegentlemen: CUI Agency

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: cuiagency.com | Infostealer data confirmed. | ***.com zoominfo.com/c/cui-agency/397459082 CUI Agency, a family-owned independent insurance firm founded in Utah in 1969. Headquartered in the Salt Lake City area, the company specializes in risk management, offering comprehensive commercial insurance, employee benefits, personal lines, and bonds. They provide tailored insurance solutions designed to mitigate risks and protect the assets of businesses and families across the region | Source: https://www.ransomware.live/id/Q1VJIEFnZW5jeUB0aGVnZW50bGVtZW4=

thegentlemen: Wacha Justen

Ransomware attack attributed to thegentlemen. | Country: NI | Sector: Not Found | Website: nwohlaw.com | Infostealer data confirmed. | ***.com zoominfo.com/c/wacha--justen-llc/357327144 Wacha & Justen, LLC, a dedicated law firm based in Napoleon, Ohio. The firm provides comprehensive legal services, including estate planning, personal injury, car accident claims, and general civil litigation. With a strong local presence, their experienced attorneys offer reliable representation to individuals and businesses throughout the region | Source: https://www.ransomware.live/id/V2FjaGEgSnVzdGVuQHRoZWdlbnRsZW1lbg==

thegentlemen: Oron Law Firm

Ransomware attack attributed to thegentlemen. | Country: CH | Sector: Business Services | Website: zoominfo.com | Infostealer data confirmed. | ***.com/c/eilon-oron-attorneys/1341420873 Oron Law Firm, a legal practice specializing in traffic law, traffic accidents, and torts. Founded by Adv. Ilon Oron,The team provides comprehensive legal representation for licensing issues, accident claims, and traffic violations, offering 24/7 customer support to assist their clients. | Source: https://www.ransomware.live/id/T3JvbiBMYXcgRmlybUB0aGVnZW50bGVtZW4=

thegentlemen: The City of Boyne City

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Public Sector | Website: cityofboynecity.com | Infostealer data confirmed. | ***.com zoominfo.com/c/the-city-of-boyne-city/368244116 City of Boyne City, a community located in Charlevoix County, Michigan. It serves as a central hub for residents, providing essential information on local government, city departments, utility services, and community events. The portal also highlights the city's parks, recreation programs, and local initiatives, reflecting its vibrant lakeside lifestyle on Lake Charlevoix | Source: https://www.ransomware.live/id/VGhlIENpdHkgb2YgQm95bmUgQ2l0eUB0aGVnZW50bGVtZW4=

thegentlemen: EMAS Group

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Energy | Website: emas.cz | Infostealer data confirmed. | ***.cz zoominfo.com/c/janča--emas-group-sro/532190785 JANCA & EMAS group s.r.o., one of the largest wholesale distributors of electrical equipment and materials in the Czech Republic. The company supplies a comprehensive range of electrical components, including switches, sockets, and smart home automation systems, primarily serving professional electricians and businesses. They operate an extensive network of physical branches across the country and offer a dedicated mobile app for quick ordering and inventory management. | Source: https://www.ransomware.live/id/RU1BUyBHcm91cEB0aGVnZW50bGVtZW4=

thegentlemen: MakoLab

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Technology | Website: makolab.com | Infostealer data confirmed. | ***.com zoominfo.com/c/makolab-sa/31278202 MakoLab, a prominent Polish IT consulting and software development company acting as a digital project house.The firm specializes in digital transformation, artificial intelligence, custom software engineering, and human-centric design.They provide comprehensive business and technology consulting, product design, and global 24/7 operations support to enterprise clients worldwide | Source: https://www.ransomware.live/id/TWFrb0xhYkB0aGVnZW50bGVtZW4=

thegentlemen: NATURGHIACCIO

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Agriculture and Food Production | Website: naturghiaccio.it | Infostealer data confirmed. | ***.it dnb.com/business-directory/company-profiles.naturghiaccio_srl.eae47436d39ec78b7abc7007a3637507.html Naturghiaccio, an Italian company founded in 2013 that specializes in the production and distribution of high-quality, certified food-grade ice. Operating with a fully automated plant, they supply premium packaged ice to the Ho.Re.Ca. sector, supermarkets, and event organizers across Italy. The company is an official member of the European Packaged Ice Association (EPIA), ensuring strict quality and safety standards for their products | Source: https://www.ransomware.live/id/TkFUVVJHSElBQ0NJT0B0aGVnZW50bGVtZW4=

thegentlemen: OSP HOLDING FRANCE

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Business Services | Website: ospholding.com | Infostealer data confirmed. | ***.com pappers.fr/entreprise/osp-holding-france-838877108 838877108 OSP HOLDING (FRANCE) is an active French company founded in 2018 and managed by APInvest France, with a substantial share capital of over €14.4 million. It specializes in the design and assembly of industrial process control equipment, as well as the development and maintenance of software for parking management systems. The company employs between 50 and 99 people and is headquartered in Boulogne-Billancourt | Source: https://www.ransomware.live/id/T1NQIEhPTERJTkcgRlJBTkNFQHRoZWdlbnRsZW1lbg==

thegentlemen: Mondottica

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Consumer Services | Website: mondottica.com | Infostealer data confirmed. | ***.com zoominfo.com/c/mondottica-ltd/346397915 Mondottica, a leading global eyewear company specializing in the design, production, and worldwide distribution of premium sunglasses and optical frames. Headquartered in London, the firm is renowned for managing an extensive portfolio of prestigious international fashion and lifestyle brand licenses. They combine innovative design with high-quality craftsmanship to deliver luxury eyewear collections to global markets | Source: https://www.ransomware.live/id/TW9uZG90dGljYUB0aGVnZW50bGVtZW4=

thegentlemen: Comp Trading Co

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Business Services | Website: ctc.co.th | Infostealer data confirmed. | ***.co.th Comp Trading Co., Ltd. (CTC), a premier Thai IT solutions and services provider founded in 1985 by former IBM engineers. The company specializes in enterprise IT infrastructure, data center solutions, cybersecurity, and comprehensive system maintenance. Today, CTC serves as a strategic technology partner for businesses, delivering disaster recovery, network support, and IT consulting services | Source: https://www.ransomware.live/id/Q29tcCBUcmFkaW5nIENvQHRoZWdlbnRsZW1lbg==

thegentlemen: Centre Ophtalmologique dErmont

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Healthcare | Website: ophtalmologie-ermont.com | Infostealer data confirmed. | ***.com Centre Ophtalmologique d'Ermont, a specialized medical clinic in France dedicated to comprehensive eye care. The facility provides a full spectrum of ophthalmology services, including routine consultations, advanced diagnostics, and surgical treatments for various ocular conditions. The portal serves as a convenient hub where patients can access health information, manage their appointments, and connect with a team of expert specialists | Source: https://www.ransomware.live/id/Q2VudHJlIE9waHRhbG1vbG9naXF1ZSBkRXJtb250QHRoZWdlbnRsZW1lbg==

thegentlemen: Climax Technology

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Technology | Website: climax.com.tw | Infostealer data confirmed. | ***.com.tw zoominfo.com/c/climax-technology-co-ltd/440165694 Climax Technology Co., Ltd., a Taipei-based company founded in 1985 that specializes in smart security systems and telecare solutions. For over three decades, the firm has leveraged its telecommunications expertise to develop innovative hybrid security panels, emergency pendants, and long-term care alert technologies. Their comprehensive product line is designed to provide reliable safety, monitoring, and rapid emergency response for residential and healthcare environments globally | Source: https://www.ransomware.live/id/Q2xpbWF4IFRlY2hub2xvZ3lAdGhlZ2VudGxlbWVu

thegentlemen: Indra Group

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Technology | Website: indracompany.com | Infostealer data confirmed. | ***.com zoominfo.com/c/indra-sistemas-sa/136495916 Indra, a leading Spanish multinational technology and consulting company. It specializes in innovative solutions for defense, aerospace, air traffic management, smart mobility, and digital transformation (via its Minsait brand). The company serves as a strategic technological partner for governments and major corporations worldwide, driving modernization and security across critical sectors | Press: https://www.democrata.es/en/economy/indra-ensures-the-continuity-of-its-services-after-a-ransomware-cyberattack-on-a-subsidiary/ | Source: https://www.ransomware.live/id/SW5kcmEgR3JvdXBAdGhlZ2VudGxlbWVu

thegentlemen: Steegaa Interior

Ransomware attack attributed to thegentlemen. | Country: AE | Sector: Consumer Services | Website: steegaa.com | Infostealer data confirmed. | ***.com zoominfo.com/c/steegaa/408684474 Steegaa Interior, a Dutch company based in Helmond specializing in high-end custom interior design and construction.Established in 2000, the firm focuses on designing, manufacturing, and installing bespoke interiors for both private and commercial clients.They are highly regarded for their exceptional craftsmanship, attention to detail, and ability to deliver complete, turnkey interior solutions.Additionally, the company operates as a recognized training center, offering apprenticeships to foster the next generation of skilled interior builders | Source: https://www.ransomware.live/id/U3RlZWdhYSBJbnRlcmlvckB0aGVnZW50bGVtZW4=

thegentlemen: DHC Corporation

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Not Found | Website: dhc.co.jp | Infostealer data confirmed. | ***.co.jp zoominfo.com/c/dhc-corp/372590440 DHC Corporation, a major Japanese health and beauty company renowned for its dietary supplements, skincare, and cosmetics. The brand is especially famous for its olive oil-based beauty products and high-quality, affordable nutritional supplements. The site serves as a primary hub for consumers to purchase their popular health, wellness, and beauty essentials | Source: https://www.ransomware.live/id/REhDIENvcnBvcmF0aW9uQHRoZWdlbnRsZW1lbg==

thegentlemen: Immling

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Not Found | Website: immling.de | Infostealer data confirmed. | ***.de is the official website for the Immling Festival, a renowned classical music and opera event held annually at Gut Immling in Halfing, Germany. Running primarily from June to August since 1997, it features high-quality opera productions and symphony concerts in a picturesque setting. In 2026, the festival celebrates its 30th anniversary, remaining a major cultural highlight in the Chiemgau region | Source: https://www.ransomware.live/id/SW1tbGluZ0B0aGVnZW50bGVtZW4=

thegentlemen: Pou Sheng International

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Consumer Services | Website: pousheng.com | Infostealer data confirmed. | ***.com zoominfo.com/c/pou-sheng-international/352458448 They serve as a key distributor and exclusive agent for major global sportswear brands like Nike, adidas, PUMA, and Under Armour. The company operates a comprehensive online and offline sales network across the country to provide a full sports and lifestyle experience. | Source: https://www.ransomware.live/id/UG91IFNoZW5nIEludGVybmF0aW9uYWxAdGhlZ2VudGxlbWVu

thegentlemen: SDEZ

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Not Found | Website: sdez.fr | Infostealer data confirmed. | ***.fr SDEZ is a historic French family-owned company founded in 1816, specializing in the rental and maintenance of professional linen, workwear, and hygiene equipment.Operating a national network of industrial laundries across France and Belgium, it has become one of the leading textile service providers in the region.The company serves thousands of business clients and employs over 700 people to deliver comprehensive laundry and hygiene solution | Source: https://www.ransomware.live/id/U0RFWkB0aGVnZW50bGVtZW4=

thegentlemen: Melcor Developments Ltd

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Construction | Website: melcor.ca | Infostealer data confirmed. | ***.ca zoominfo.com/c/melcor-developments-ltd/65095259 Melcor Developments Ltd., a prominent Canadian real estate development and construction company founded in 1923 and headquartered in Edmonton, Alberta. The firm specializes in the full lifecycle of property development, creating residential communities, commercial spaces, and industrial parks across Western Canada. With nearly a century of experience, Melcor is recognized for building sustainable, high-quality neighborhoods and long-term investment properties | Source: https://www.ransomware.live/id/TWVsY29yIERldmVsb3BtZW50cyBMdGRAdGhlZ2VudGxlbWVu

thegentlemen: Ayres Carr & Sullivan, P.C.

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: www.linkedin.com | Ayres Carr & Sullivan, P.C. is a longstanding, general civil practice and trial law firm based in Indianapolis, Indiana. Tracing its roots back to 1914, the firm serves clients across the state with a focus on civil litigation, trial practice, and specialized matters including probate, bankruptcy, and corporation law. Primary Location: 251 E. Ohio St., Suite 500, Indianapolis, IN 46204 Primary Practice Areas: Civil Litigation, Trial Practice, Personal Injury, Corporation Law, Probate, and Bankruptcy Key Attorneys: William S. Ayres, John R. Carr III, and Bret Clement https://www.***.com/company/ayres-carr-&-sullivan-pc | Source: https://www.ransomware.live/id/QXlyZXMgQ2FyciAmIFN1bGxpdmFuLCBQLkMuQHRoZWdlbnRsZW1lbg==

thegentlemen: Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Manufacturing | Website: www.zoominfo.com | https://www.***.com/c/atlas-elektronik-gmbh/22289599 https://www.***.com/c/atlas-north-america-llc/346681852 https://www.***.com/c/thyssenkrupp-marine-systems/559786010 www.atlas-elektronik.com na.atlas-elektronik.com https://www.tkmsgroup.com/atlas-elektronik/ ThyssenKrupp Marine Systems of Germany (often abbreviated TKMS) is a group and holding company of providers of naval vessels, surface ships and submarines. It was founded when large industrial conglomerate ThyssenKrupp acquired Howaldtswerke-Deutsche Werft on January 5, 2005 TKMS Group is a leading provider of integrated system solutions in maritime defense technologies, catering to the complex requirements of modern navies. The company specializes in surface vessels, submarines, and advan Atlas Elektronik, founded in 1902 and headquartered in Bremen, Germany, is a marine electronics and systems business. It is invol...

thegentlemen: CHIFENG GOLD SEPON

Ransomware attack attributed to thegentlemen. | Country: LA | Sector: Energy | Website: lxml.la | Infostealer data confirmed. | ***.la zoominfo.com/c/lane-xang-minerals-ltd/1311794256 which operates the major Sepon open-pit and underground gold and copper mine in Savannakhet Province, Laos.As a significant regional employer, the company heavily invests in local workforce development, with 95% of its staff being Lao nationals WILL BE UPDATED! | Source: https://www.ransomware.live/id/Q0hJRkVORyBHT0xEIFNFUE9OQHRoZWdlbnRsZW1lbg==

thegentlemen: Natren

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: natren.com | Infostealer data confirmed. | ***.com zoominfo.com/c/natren-inc/26870087 Natren is a leading manufacturer of premium probiotic supplements with over 30 years of experience, dedicated to improving gut health and overall well-being.Based in California, the company offers a comprehensive range of natural, non-GMO formulas tailored for men, women, children, and even pets.They are highly regarded for their flagship "Healthy Trinity" 3-in-1 system and their strict cold-chain shipping process, which guarantees 100% potency through the expiration date | Source: https://www.ransomware.live/id/TmF0cmVuQHRoZWdlbnRsZW1lbg==

thegentlemen: Au Vieux Campeur

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Consumer Services | Website: auvieuxcampeur.fr | Infostealer data confirmed. | ***.fr Au Vieux Campeur is a premier French retailer and the leading independent outdoor and sports equipment company in Europe.Founded in Paris in 1941, the brand has expanded from a single historic boutique in the Latin Quarter to nearly 50 stores across France and a robust e-commerce platform.They offer an extensive selection of over 1,500 premium brands, providing specialized clothing and gear for a wide variety of activities including mountaineering, diving, skiing, and trail running | Press: https://www.auvieuxcampeur.fr/communique-officiel-cyberattaque | Source: https://www.ransomware.live/id/QXUgVmlldXggQ2FtcGV1ckB0aGVnZW50bGVtZW4=

thegentlemen: Meccanica Gn

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Manufacturing | Website: meccanicagn.com | Infostealer data confirmed. | ***.com zoominfo.com/c/meccanica-gn/368731563 Meccanica GN is an Italian precision manufacturing company based in Carpi, specializing in high-accuracy machining like milling, turning, and grinding.With over two decades of experience, they produce critical components for demanding sectors, including Formula 1 motorsport, aerospace, automotive, and biomedical.The company is recognized for its advanced technology, strict quality assurance, and commitment to maximum performance | Source: https://www.ransomware.live/id/TWVjY2FuaWNhIEduQHRoZWdlbnRsZW1lbg==

thegentlemen: Al Dhow Group

Ransomware attack attributed to thegentlemen. | Country: AE | Sector: Transportation/Logistics | Website: al-dhow.com | Infostealer data confirmed. | ***.com zoominfo.com/c/al-dhow/345585723 Dhow International Holding is a diversified group of companies with a portfolio spanning high-growth and high-impact industries across the GCC region.Their extensive operations encompass a wide range of sectors, including engineering, architectural solutions, hospitality, food & beverage, logistics, healthcare, and venture capital. The group is committed to delivering integrated, end-to-end services while fostering long-term sustainable growth across all its businesses | Source: https://www.ransomware.live/id/QWwgRGhvdyBHcm91cEB0aGVnZW50bGVtZW4=

thegentlemen: Beran Concrete

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Construction | Website: beranconcrete.com | Infostealer data confirmed. | ***.com zoominfo.com/c/beran-concrete-inc/4424481 Beran Concrete is a premier concrete construction and ready-mix supplier serving commercial and residential projects across Wichita, Kansas, and the broader Midwest.Founded in 1980, the company is driven by a deep pride in quality workmanship and a proven ability to consistently meet strict client deadlines.To support its continued growth and better serve local communities, the business actively expands its regional footprint by integrating additional ready-mix plants | Source: https://www.ransomware.live/id/QmVyYW4gQ29uY3JldGVAdGhlZ2VudGxlbWVu

thegentlemen: BDS CZ

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Business Services | Website: bds.cz | Infostealer data confirmed. | ***.cz BDS CZ is a Prague-based real estate agency that offers comprehensive property services, including Airbnb management, interior renovations, and investment consulting.The company's name originates from the Vietnamese abbreviation for real estate, indicating its strong focus on serving the local Vietnamese community and investors.Operating from its headquarters in Prague's historic Old Town, the agency assists clients in maximizing their property value and managing real estate portfolios | Source: https://www.ransomware.live/id/QkRTIENaQHRoZWdlbnRsZW1lbg==

thegentlemen: Gegenbauer Elektrotechnik

Ransomware attack attributed to thegentlemen. | Country: AT | Sector: Manufacturing | Website: gegenbauer-it.at | Infostealer data confirmed. | ***.at Gegenbauer Elektrotechnik & IT GmbH is a Vienna-based service provider specializing in comprehensive electrical engineering and IT solutions for businesses.Evolving from a sole proprietorship with over 30 years of experience, the company was officially established in 2015 to offer end-to-end planning and implementation.They focus on delivering customized technical infrastructures, professional support, and employee training to meet the diverse needs of their clients | Source: https://www.ransomware.live/id/R2VnZW5iYXVlciBFbGVrdHJvdGVjaG5pa0B0aGVnZW50bGVtZW4=

thegentlemen: Stadttheater Giessen

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Hospitality and Tourism | Website: stadttheater-giessen.de | Infostealer data confirmed. | ***.de rocketreach.co/stadttheater-giessen-gmbh-profile_b40b4590ff936dde Stadttheater Gießen is a prominent multi-genre municipal theatre in Germany, renowned for its striking Art Nouveau (Jugendstil) building constructed in 1907. As the cultural heart of the Mittelhessen region, it offers a diverse repertoire encompassing opera, musicals, drama, and classical concerts. The theatre is celebrated for its high-quality productions, blending traditional classics with innovative contemporary works for audiences of all ages | Press: https://www.mittelhessen.de/lokales/kreis-giessen/giessen/cyberangriff-auf-stadttheater-giessen-wir-spielen-weiter-5818068 | Source: https://www.ransomware.live/id/U3RhZHR0aGVhdGVyIEdpZXNzZW5AdGhlZ2VudGxlbWVu

thegentlemen: Bell Hardware

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Consumer Services | Website: bellhardware.com | Infostealer data confirmed. | ***.com zoominfo.com/c/bell-hardware/353995383 Bell Hardware is a premier supplier of premium commercial doors, frames, and architectural hardware, operating out of seven locations across Oregon and Northern California.They act as a comprehensive one-stop shop for contractors, providing high-quality building products alongside expert on-site installation and modification services.Furthermore, the company partners with design and construction teams during the early planning stages to evaluate project elements and streamline the building process | Source: https://www.ransomware.live/id/QmVsbCBIYXJkd2FyZUB0aGVnZW50bGVtZW4=

thegentlemen: Royal Thai Navy Housing Cooperative

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Public Sector | Website: kehanavycoop.com | Infostealer data confirmed. | ***.com Royal Thai Navy Housing Cooperative Limited, a service organization based in Bangkok, Thailand.It primarily manages housing projects like "Navy Place," offering residential units for sale and rent to naval personnel and members.Additionally, the cooperative provides financial services such as member shares, loans, and deposits, alongside educational scholarships for members children | Source: https://www.ransomware.live/id/Um95YWwgVGhhaSBOYXZ5IEhvdXNpbmcgQ29vcGVyYXRpdmVAdGhlZ2VudGxlbWVu

thegentlemen: Hooke Laboratories

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Technology | Website: hookelabs.com | Infostealer data confirmed. | ***.com zoominfo.com/c/hooke-laboratories-inc/345976723 Hooke Laboratories is a biotechnology company based in Lawrence, Massachusetts, specializing in biological products for medical and pharmaceutical research.They are best known for their "Hooke Kits™," which are ready-to-use emulsions used to induce animal models of autoimmune diseases, such as EAE, in laboratory rodents.The company operates strictly as a preclinical research supplier, working only with rodents and in vitro, and does not offer any products for human clinical use | Source: https://www.ransomware.live/id/SG9va2UgTGFib3JhdG9yaWVzQHRoZWdlbnRsZW1lbg==

thegentlemen: GIA Partners

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: giallc.com | Infostealer data confirmed. | ***.com zoominfo.com/c/gia-partners-llc/347817491 GIA Partners, LLC is a New York-based registered investment advisor specializing in fixed income strategies and credit analysis .The firm focuses on diversified portfolios, including core fixed income, high yield, and emerging market debt, leveraging the extensive experience of its investment team.With over $1 billion in assets under management, GIA emphasizes that credit risk is well-compensated and diversifiable to generate excess returns for its clients | Source: https://www.ransomware.live/id/R0lBIFBhcnRuZXJzQHRoZWdlbnRsZW1lbg==

thegentlemen: Rowley Properties

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Business Services | Website: rowleyproperties.com | Infostealer data confirmed. | ***.com zoominfo.com/c/rowley-properties/1117416022 Rowley Properties is a multi-generational, family-owned real estate company based in Issaquah, Washington, founded in 1954. The firm specializes in owning, developing, and managing approximately 80 acres of commercial and residential properties, including office spaces, apartments, and storage facilities in downtown Issaquah. They are deeply committed to local community development, focusing on long-term projects that help businesses succeed and families thrive | Source: https://www.ransomware.live/id/Um93bGV5IFByb3BlcnRpZXNAdGhlZ2VudGxlbWVu

thegentlemen: Canada Wide Media

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Telecommunication | Website: canadawide.com | Infostealer data confirmed. | ***.com zoominfo.com/c/canada-wide-media-ltd/24612070 Canada Wide Media is Western Canada's leading independent publishing and custom content creation company, headquartered in Burnaby, British Columbia.They produce over 48 premium print and digital publications, such as BC Business and TV Week, reaching an audience of over 6 million readers.The firm specializes in audience engagement, custom publishing, and prestige media solutions tailored for various industries | Source: https://www.ransomware.live/id/Q2FuYWRhIFdpZGUgTWVkaWFAdGhlZ2VudGxlbWVu

thegentlemen: ErgoMed

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Healthcare | Website: ergomed.net | Infostealer data confirmed. | ***.net ErgoMed Work Systems is a US-based occupational health and employment testing company that has been providing loss control programs since 1992.They specialize in physical demand simulation testing, musculoskeletal evaluations, and post-offer employment screening to help businesses and HR managers reduce workplace injuries | Source: https://www.ransomware.live/id/RXJnb01lZEB0aGVnZW50bGVtZW4=

thegentlemen: MBO GmbH

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Business Services | Website: mbo-gmbh.com | Infostealer data confirmed. | ***.com MBO GmbH is a German surface technology company based in Roding, serving as the in-house surface treatment unit for the Mühlbauer Parts & Systems Group.With over 40 years of experience, they specialize in various advanced coating processes, including electroplating, powder coating, and painting.The company provides comprehensive technical advice and surface finishing solutions that are directly integrated with their parent company's production lines | Source: https://www.ransomware.live/id/TUJPIEdtYkhAdGhlZ2VudGxlbWVu

thegentlemen: Keywest Projects

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Construction | Website: keywestprojects.ca | Infostealer data confirmed. | ***.ca zoominfo.com/c/keywest-projects-ltd/354074136 KeyWest Projects Ltd. is a Canadian EPCM (Engineering, Procurement, Construction Management) company headquartered in Calgary, Alberta. It specializes in full-cycle project delivery for the energy sector — including oil and gas facilities, pipelines, and industrial infrastructure — primarily across Western Canada. The firm is recognized for its integrated, client-driven approach that emphasizes safety, efficiency, and technical reliability on complex energy projects | Source: https://www.ransomware.live/id/S2V5d2VzdCBQcm9qZWN0c0B0aGVnZW50bGVtZW4=

thegentlemen: International Freight Services

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Transportation/Logistics | Website: ifs-sfo.com | Infostealer data confirmed. | ***.com zoominfo.com/c/ifs-sfocom/348198952 IFS (International Freight Services, Inc.) is a logistics company headquartered at San Francisco International Airport (SFO). It provides international air and ocean freight forwarding, customs brokerage, warehousing, and end-to-end supply chain solutions. With decades of experience, IFS specializes in time-critical and high-touch cargo, serving industries from technology and life sciences to automotive and retail | Source: https://www.ransomware.live/id/SW50ZXJuYXRpb25hbCBGcmVpZ2h0IFNlcnZpY2VzQHRoZWdlbnRsZW1lbg==

thegentlemen: CTM India Limited motherson INDIA

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Manufacturing | Website: dnb.com | Infostealer data confirmed. | ***.com/business-directory/company-profiles.ctm_india_limited.c67e34c4f71f7ed11aaf1dc39e0e10a6.html CTM India Limited is located in New Delhi, Delhi, India and is part of the Metalworking Machinery Manufacturing industry. CTM India Limited is associated with the global Motherson Group, focusing on producing specialized equipment and forms essential for industrial manufacturing processes. The company is led by key principal Bimal Dhar and operates within the broader machinery manufacturing sector | Source: https://www.ransomware.live/id/Q1RNIEluZGlhIExpbWl0ZWQgbW90aGVyc29uIElORElBQHRoZWdlbnRsZW1lbg==

thegentlemen: Athens Orthopedic Clinic

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: athensorthopedicclinic.com | Infostealer data confirmed. | ***.com zoominfo.com/c/athens-orthopedic-clinic-greensboro/351501009 Athens Orthopedic Clinic, founded in 1966, is a leading specialized medical practice based in Athens, Georgia.The clinic provides specialized orthopedic care, including joint and spine treatments, imaging, and urgent care across multiple local facilities.It is widely recognized for its innovative solutions and patient-centered approach, actively serving the Northeast Georgia community | Source: https://www.ransomware.live/id/QXRoZW5zIE9ydGhvcGVkaWMgQ2xpbmljQHRoZWdlbnRsZW1lbg==

thegentlemen: hiddenn

Ransomware attack attributed to thegentlemen. | Sector: Not Found | hiddenn | Source: https://www.ransomware.live/id/aGlkZGVubkB0aGVnZW50bGVtZW4=

thegentlemen: Amigest

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Agriculture and Food Production | Website: amigest.fr | Infostealer data confirmed. | ***.fr zoominfo.com/c/amigest/533109979 Amigest is a prominent French IT integrator based in the Lyon region, specializing in management software, professional telephony, and comprehensive IT infrastructure for SMEs. As a highly certified partner for leading brands like Sage and EBP, they provide tailored ERP solutions, cloud services, and cybersecurity to optimize business operations. With decades of experience, the company supports organizations through digital transformation, electronic invoicing compliance, and ongoing technical expertise | Source: https://www.ransomware.live/id/QW1pZ2VzdEB0aGVnZW50bGVtZW4=

thegentlemen: Ty Thac Co

Ransomware attack attributed to thegentlemen. | Country: VN | Sector: Not Found | Website: tythac.com.vn | Infostealer data confirmed. | ***.com.vn Ty Thac Co., Ltd., also known as Yih Shuo Footwear, is a prominent footwear manufacturing company based in Dong Thap Province, Vietnam.Established in 2011, the enterprise specializes in the large-scale production and global export of shoes and related components.Operating from its extensive facility in Thap Muoi District, the company plays a significant role in the local industrial sector by managing complex international supply chains | Source: https://www.ransomware.live/id/VHkgVGhhYyBDb0B0aGVnZW50bGVtZW4=

thegentlemen: TERRIO Therapy Fitness

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Consumer Services | Website: terriotherapy.com | Infostealer data confirmed. | ***.com zoominfo.com/c/terrio-therapy-fitness-inc/351115575 TERRIO Physical Therapy & Fitness is the largest rehabilitation and wellness provider in California's Central Valley, operating numerous clinics across the region.Founded in 1998, the company specializes in outpatient orthopedics, aquatic therapy, neuro-rehabilitation, and acute inpatient care.Recognized for its exceptional patient satisfaction, TERRIO has been repeatedly voted the Best Physical Therapy Company in Kern County | Source: https://www.ransomware.live/id/VEVSUklPIFRoZXJhcHkgRml0bmVzc0B0aGVnZW50bGVtZW4=

thegentlemen: SGS Malaysia

Ransomware attack attributed to thegentlemen. | Country: MY | Sector: Business Services | Website: sgsmalaysia.com | Infostealer data confirmed. | ***.com SGS Malaysia provides integrated, AI-powered cloud, FinTech, and digital transformation solutions designed to optimize business operations and drive financial growth. Their comprehensive services span cloud workforce management, automated payroll compliance, and advanced cybersecurity protocols to ensure secure technology ecosystems. By leveraging innovative analytics and tailored platforms, the company empowers organizations to operate efficiently and scale confidently on a global level | Source: https://www.ransomware.live/id/U0dTIE1hbGF5c2lhQHRoZWdlbnRsZW1lbg==

thegentlemen: Alexander Buch Bilanzbuchhalter

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Business Services | Website: buch-bilanzbuchhalter.de | Infostealer data confirmed. | ***.de Alexander Buch is a certified accountant (Bilanzbuchhalter) based in Herne, Germany, offering professional financial services to both businesses and individuals. His practice specializes in ongoing bookkeeping, payroll accounting, commercial consulting, and comprehensive support for startup founders. Additionally, he provides dedicated tax assistance services, helping clients efficiently manage their financial obligations and regulatory requirements | Source: https://www.ransomware.live/id/QWxleGFuZGVyIEJ1Y2ggQmlsYW56YnVjaGhhbHRlckB0aGVnZW50bGVtZW4=

thegentlemen: Vera Chimie Management

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Manufacturing | Website: verachimie.fr | Infostealer data confirmed. | ***.fr zoominfo.com/c/vera-chimie-management/458572585 Vera Chimie is a French chemical manufacturing company based in Irigny with over 30 years of industry experience.They specialize in custom formulation, manufacturing, and packaging of liquid and powder chemicals for various industrial sectors.The company operates primarily on a subcontracting basis, delivering tailored chemical solutions with a strong focus on environmental standards and client confidentiality | Source: https://www.ransomware.live/id/VmVyYSBDaGltaWUgTWFuYWdlbWVudEB0aGVnZW50bGVtZW4=

thegentlemen: Al Khaja Holding

Ransomware attack attributed to thegentlemen. | Country: AE | Sector: Business Services | Website: alkhajaholding.com | Infostealer data confirmed. | ***.com rocketreach.co/al-khaja-holding-profile_b451cc56fc778622 Al Khaja Holding is a prominent multi-business conglomerate based in the United Arab Emirates, originally established in 1969 as the Abu Dhabi Tyre Company.The group manages a diverse portfolio of investments across various sectors, including oil and gas, healthcare, pharmaceuticals, and retail distribution.Operating from its headquarters in Abu Dhabi, the holding company plays a significant role in the region's commercial landscape by overseeing its wide variety of subsidiary enterprises | Source: https://www.ransomware.live/id/QWwgS2hhamEgSG9sZGluZ0B0aGVnZW50bGVtZW4=

thegentlemen: Cofaq

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Not Found | Website: cofaq.fr | Infostealer data confirmed. | ***.fr zoominfo.com/c/groupe-cofaq/426074064 Groupe COFAQ is a prominent French cooperative of independent distributors specializing in hardware, tools, industrial supplies (QUOFI), and agricultural equipment.Headquartered in Poitiers, the organization federates hundreds of retail points of sale and independent merchants across France to strengthen their market presence.By leveraging centralized purchasing and dedicated logistics platforms like COFALOG, the group provides its members with optimized supply chain solutions and strategic commercial support | Source: https://www.ransomware.live/id/Q29mYXFAdGhlZ2VudGxlbWVu

thegentlemen: Burris MacOmber

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: burrismacomber.com | Infostealer data confirmed. | ***.com zoominfo.com/c/burris--macomber-pllc/368834075 Burris & MacOmber, PLLC is a reputable law firm based in Tucson, Arizona, recognized for its commitment to excellence and integrity in legal practice. The firm provides a comprehensive range of services, including civil litigation, international business law, real estate transactions, and estate planning. Backed by a team of experienced attorneys and knowledgeable support staff, they deliver tailored legal solutions to effectively meet their clients' diverse needs | Source: https://www.ransomware.live/id/QnVycmlzIE1hY09tYmVyQHRoZWdlbnRsZW1lbg==

thegentlemen: Sertrans

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Transportation/Logistics | Website: sertrans.es | Infostealer data confirmed. | ***.es zoominfo.com/c/sertrans/372599324 Sertrans is a prominent Spanish logistics and supply chain management company founded in 1987, which has grown from a small family business into a major industry player.The company specializes in comprehensive goods transportation, offering services that range from domestic road haulage and parcel delivery to international freight.With an extensive network and decades of experience, Sertrans efficiently connects businesses across Spain, the rest of Europe, and Morocco | Source: https://www.ransomware.live/id/U2VydHJhbnNAdGhlZ2VudGxlbWVu

thegentlemen: Yudu Technology

Ransomware attack attributed to thegentlemen. | Country: SG | Sector: Technology | Website: yudutek.com | Infostealer data confirmed. | ***.com zoominfo.com/c/yudu-technology-co-ltd/1340189458 Yudutek is a professional IT system integrator founded in 2008 in Zhubei, Taiwan, specializing in commercial computing hardware and generative AI solutions.With over 15 years of industry experience, the company provides enterprise on-premise AI, AI server infrastructure, and customized digital transformation services.By partnering with major technology brands, Yudutek empowers organizations to seamlessly implement advanced artificial intelligence applications and optimize their operational efficiency | Source: https://www.ransomware.live/id/WXVkdSBUZWNobm9sb2d5QHRoZWdlbnRsZW1lbg==

thegentlemen: SigmaControl

Ransomware attack attributed to thegentlemen. | Country: NL | Sector: Technology | Website: sigmacontrol.eu | Infostealer data confirmed. | ***.eu zoominfo.com/c/sigmacontrol-bv/446626536 SigmaControl B.V. is a premier Dutch industrial automation specialist and the exclusive Benelux distributor for the Austrian automation brand SIGMATEK. Based in Barendrecht, they deliver fully integrated machine control systems, robotics, SCADA software, and expert technical support tailored specifically for machine builders. Their core mission is to optimize manufacturing processes by providing innovative, high-quality hardware and software solutions for complex motion-oriented applications | Source: https://www.ransomware.live/id/U2lnbWFDb250cm9sQHRoZWdlbnRsZW1lbg==

thegentlemen: Enciso Ltda

Ransomware attack attributed to thegentlemen. | Country: CL | Sector: Not Found | Website: encisoltda.com | Infostealer data confirmed. | ***.com zoominfo.com/c/enciso-ltda/425799840 Enciso Ltda is a trusted Colombian company founded in 1999, specializing in the distribution of industrial safety equipment, medical supplies, and road signaling. Operating from Dosquebradas with four regional branches, they proudly serve over 5,000 clients nationwide. Their core mission is safeguarding workers' health and lives through premium protective equipment and reliable safety solutions | Source: https://www.ransomware.live/id/RW5jaXNvIEx0ZGFAdGhlZ2VudGxlbWVu

thegentlemen: South Texas Spinal Clinic

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: spinaldoc.com | Infostealer data confirmed. | ***.com zoominfo.com/c/south-texas-spinal-clinic-pa/57099280 South Texas Spinal Clinic has been a trusted regional leader in orthopedic care since 1986, specializing in comprehensive spine, bone, and joint treatments across San Antonio and South Texas. Their team of board-certified specialists focuses on delivering exceptional, patient-centered care ranging from advanced pain management to targeted bone health therapies. They are dedicated to improving mobility and quality of life through expert prevention, education, and innovative medical solutions | Source: https://www.ransomware.live/id/U291dGggVGV4YXMgU3BpbmFsIENsaW5pY0B0aGVnZW50bGVtZW4=

thegentlemen: Mahajak Development

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Construction | Website: mahajak.com | Infostealer data confirmed. | ***.com zoominfo.com/c/mahajak-development-co-ltd/346627274 Mahajak Development Co., Ltd. is a leading Thai technology provider established in 1971, headquartered in Bangkok. Evolving from an automotive air-conditioning distributor, they are now a premier supplier of Mitsubishi Heavy Duty climate systems, smart home automation, and professional audio-visual solutions. The company delivers comprehensive consulting, design, and installation services for commercial projects and government facilities across Thailand | Source: https://www.ransomware.live/id/TWFoYWphayBEZXZlbG9wbWVudEB0aGVnZW50bGVtZW4=

thegentlemen: Calipage Humblet

Ransomware attack attributed to thegentlemen. | Country: BE | Sector: Not Found | Website: humblet.calipage.be | Infostealer data confirmed. | ***.calipage.be Papeterie Humblet is a historic Belgian family business founded in 1910 that specializes in comprehensive office and school supplies. Beyond retail, the company provides professional printing and copy services to its local customers. Operating primarily in the Herstal and Blegny regions, they serve as a dedicated partner within the Calipage Benelux network | Source: https://www.ransomware.live/id/Q2FsaXBhZ2UgSHVtYmxldEB0aGVnZW50bGVtZW4=

thegentlemen: Ministarstvo zdravstva Republike Hrvatske

Ransomware attack attributed to thegentlemen. | Country: HR | Sector: Public Sector | Website: zdravlje.gov.hr | Infostealer data confirmed. | ***.gov.hr zoominfo.com/c/ministarstvo-zdravstva-republike-hrvatske/1339932847 The Ministry of Health of the Republic of Croatia is the central government authority responsible for shaping national health policies, regulating medical standards, and managing the public healthcare system. Through its official portal, it provides citizens with crucial public health guidelines, legislative updates, and secure access to modern digital e-Health services. Their primary mission is to protect population well-being, ensure equitable access to high-quality medical care, and continuously modernize the national health infrastructure | Source: https://www.ransomware.live/id/TWluaXN0YXJzdHZvIHpkcmF2c3R2YSBSZXB1Ymxpa2UgSHJ2YXRza2VAdGhlZ2VudGxlbWVu

thegentlemen: Palmer Sicard

Ransomware attack attributed to thegentlemen. | Sector: Not Found | Website: palmerandsicard.com | Infostealer data confirmed. | ***.com zoominfo.com/c/palmer--sicard-inc/43926372 Palmer & Sicard is a premier, 100% employee-owned mechanical contractor established in 1954 and headquartered in Exeter, New Hampshire. For over 70 years, they have proudly served Northern New England, specializing in comprehensive HVAC systems, commercial plumbing, and custom sheet metal fabrication. Driven by a commitment to excellence, this trusted team delivers dependable, top-tier mechanical solutions from initial project conception through final installation and ongoing service | Source: https://www.ransomware.live/id/UGFsbWVyIFNpY2FyZEB0aGVnZW50bGVtZW4=

thegentlemen: Linnecken Partner

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Business Services | Website: linnecken-partner.de | Infostealer data confirmed. | ***.de zoominfo.com/c/linnecken--partner/509433943 Linnecken & Partner is a renowned German tax and legal advisory firm based in Wentorf near Hamburg, proudly serving clients since 1977. They specialize exclusively in providing comprehensive tax consulting, financial planning, and legal services tailored specifically for healthcare professionals, doctors, and medical centers. With decades of niche expertise, the firm ensures that medical practitioners receive reliable support in navigating complex medical law, employment regulations, and business management | Source: https://www.ransomware.live/id/TGlubmVja2VuIFBhcnRuZXJAdGhlZ2VudGxlbWVu

thegentlemen: Centre Medical Crowley

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Healthcare | Website: crowleymd.ca | Infostealer data confirmed. | ***.ca zoominfo.com/c/centre-médical-crowley/1340359581 Crowley Medical Centre is a premier healthcare facility in Montreal, located just steps away from the McGill University Health Centre (MUHC). They provide comprehensive, specialized medical care across diverse fields, including family medicine, obstetrics, ophthalmology, and rheumatology, alongside advanced medical aesthetics. Their core mission is to deliver exceptional, patient-centered treatments using state-of-the-art technology within a welcoming and highly professional environment | Source: https://www.ransomware.live/id/Q2VudHJlIE1lZGljYWwgQ3Jvd2xleUB0aGVnZW50bGVtZW4=

thegentlemen: Executive Coach

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: executivecoach.net | Infostealer data confirmed. | ***.net zoominfo.com/c/executive-coach-inc/32002101 Executive Coach Inc. is a premier group transportation and luxury motorcoach charter company based in Lancaster, Pennsylvania, proudly serving clients since 1979. Despite its corporate-sounding name, the company does not offer leadership training; instead, it specializes in comfortable charter bus rentals, airport transfers, and customized group tours. They provide reliable, high-end travel solutions across Pennsylvania, Maryland, and beyond, seamlessly accommodating groups of all sizes with a modern and well-maintained fleet | Source: https://www.ransomware.live/id/RXhlY3V0aXZlIENvYWNoQHRoZWdlbnRsZW1lbg==

thegentlemen: Mackay Sugar

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Agriculture and Food Production | Website: mkysugar.com.au | Infostealer data confirmed. | ***.com.au zoominfo.com/c/mackay-sugar-ltd/1147904633 Mackay Sugar is Australia's second-largest sugar manufacturer, headquartered in tropical North Queensland with over 140 years of rich industry heritage. Owned primarily by local sugarcane farmers, the company operates major mills to produce raw sugar, molasses, and renewable electricity generated from bagasse. With an annual turnover exceeding $600 million, they serve as a vital economic pillar in the region, dedicated to sustainable practices and supplying high-quality products to global markets | Press: https://www.abc.net.au/news/2026-06-10/cyber-attack-shuts-down-north-queensland-sugar-mills/106780304 | Source: https://www.ransomware.live/id/TWFja2F5IFN1Z2FyQHRoZWdlbnRsZW1lbg==

thegentlemen: Buratti

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Manufacturing | Website: buratti.it | Infostealer data confirmed. | ***.it zoominfo.com/c/buratti-store/533160142 Buratti is a historic, third-generation Italian family business based in Bolzano, renowned for its premium footwear boutiques. They offer a vast selection of elegant, casual, and mountain shoes for men, women, and children from top Italian brands. Additionally, they specialize in professional safety footwear and work accessories for the agricultural and industrial sectors, ensuring maximum protection for workers | Source: https://www.ransomware.live/id/QnVyYXR0aUB0aGVnZW50bGVtZW4=

thegentlemen: National Museum

Ransomware attack attributed to thegentlemen. | Country: DK | Sector: Public Sector | Website: natmus.dk | Infostealer data confirmed. | ***.dk zoominfo.com/c/national-museum/372526094 The National Museum of Denmark, located in the heart of Copenhagen, is the country's premier institution for cultural history, spanning from the Stone Age to the present day. It houses world-renowned archaeological treasures—including Viking hoards, the ancient Sun Chariot, and the Egtved Girl—alongside extensive global ethnographic collections. The museum is dedicated to exploring and sharing Denmark's rich heritage and global human history through engaging, research-driven exhibitions | Source: https://www.ransomware.live/id/TmF0aW9uYWwgTXVzZXVtQHRoZWdlbnRsZW1lbg==

thegentlemen: Times Software

Ransomware attack attributed to thegentlemen. | Country: SG | Sector: Technology | Website: timesoftsg.com.sg | Infostealer data confirmed. | ***.com.sg zoominfo.com/c/times-software-pte-ltd/432254282 Times Software Pte Ltd is a trusted Singaporean IT company founded in 1998, specializing in comprehensive Human Resource and Payroll management solutions.They provide businesses with robust software that seamlessly automates timesheets, leave management, and claims while ensuring strict compliance with local CPF, IRAS, and MOM regulations.With a strong focus on boosting corporate productivity, they help organizations simplify complex HR workflows and significantly reduce manual administrative work | Source: https://www.ransomware.live/id/VGltZXMgU29mdHdhcmVAdGhlZ2VudGxlbWVu

thegentlemen: Traublinger

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Manufacturing | Website: traublinger.de | Infostealer data confirmed. | ***.de Backerei Traublinger is a traditional, family-owned German bakery and confectionery company founded in 1912, headquartered near Munich in Bavaria.With over a century of heritage and around 165 employees, they expertly blend time-honored artisanal baking craftsmanship with modern culinary innovation.The company produces and distributes a wide variety of premium breads, pastries, cakes, and snacks through its extensive network of local retail branches across the region | Source: https://www.ransomware.live/id/VHJhdWJsaW5nZXJAdGhlZ2VudGxlbWVu

thegentlemen: Fecovita

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Agriculture and Food Production | Website: fecovita.com | Infostealer data confirmed. | ***.com zoominfo.com/c/fecovita/369346602 Fecovita (Argentine Federation of Wine Cooperatives) is the largest wine cooperative in the Americas and one of Argentina's most prominent viticultural groups. Uniting over 5,000 small grape growers across 29 local cooperatives in Mendoza, they sustainably cultivate approximately 25,000 hectares of premium vineyards. Driven by a mission to empower local producers, the federation masterfully blends traditional winemaking with modern innovation, exporting high-quality wines and grape products to more than 40 countries worldwide | Source: https://www.ransomware.live/id/RmVjb3ZpdGFAdGhlZ2VudGxlbWVu

thegentlemen: Constructions Piraino

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Construction | Website: piraino.fr | Infostealer data confirmed. | ***.fr zoominfo.com/c/constructions-piraino/459764727 Constructions Piraino is a premier custom home builder based in Wasquehal, proudly serving the Nord and Pas-de-Calais regions of France. Specializing in the design and construction of individual residential homes, they are driven by a passion for turning their clients' architectural dreams into reality. With a dedicated team of professionals, the company delivers high-quality, tailored housing solutions that perfectly blend modern comfort with personalized design across the Hauts-de-France area | Source: https://www.ransomware.live/id/Q29uc3RydWN0aW9ucyBQaXJhaW5vQHRoZWdlbnRsZW1lbg==

thegentlemen: Kozminski University

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Education | Website: kozminski.edu.pl | Infostealer data confirmed. | ***.edu.pl zoominfo.com/c/kozminski-university/372606592 Kozminski University, located in Warsaw, is Poland's premier private business school and a globally recognized academic institution holding the prestigious "Triple Crown" accreditation. Consistently ranked among the top European business schools by the Financial Times, it specializes in management, finance, and law. The university is dedicated to shaping future business leaders through innovative, research-driven education and strong international partnership | Source: https://www.ransomware.live/id/S296bWluc2tpIFVuaXZlcnNpdHlAdGhlZ2VudGxlbWVu

thegentlemen: Cole Manufacturing

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: colemfg.com | Infostealer data confirmed. | ***.com zoominfo.com/c/cole-manufacturing-corp/344188464 Cole Manufacturing is a specialized metal fabrication and custom tooling company based in West Bend, Wisconsin, dedicated to delivering high-quality, cost-effective solutions for the metal forming industry.They offer a comprehensive range of services, including precision tool and die making, metal stamping, prototyping, and both manual and robotic welding.With versatile capabilities and advanced equipment, the company expertly handles projects of any size, providing reliable manufacturing support from custom fixtures to high-volume production runs | Source: https://www.ransomware.live/id/Q29sZSBNYW51ZmFjdHVyaW5nQHRoZWdlbnRsZW1lbg==

thegentlemen: Maine Oxy

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Energy | Website: maineoxy.com | Infostealer data confirmed. | ***.com zoominfo.com/c/maine-oxy/59165071 Founded in 1929, Maine Oxy is a trusted, family-owned leader in supplying industrial, medical, and specialty gases alongside premium welding equipment.Growing from a single location in Auburn to over 20 branches across New England, they provide comprehensive industry solutions and reliable services.For nearly a century, their unwavering dedication to innovation has made them an essential, customer-focused partner for businesses across nine states | Source: https://www.ransomware.live/id/TWFpbmUgT3h5QHRoZWdlbnRsZW1lbg==

thegentlemen: Buechel Stone

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: buechelstone.com | Infostealer data confirmed. | ***.com zoominfo.com/c/buechel-stone-corp/5800461 Founded in 1964 as a family-owned business, Buechel Stone is a premier natural stone quarrier and fabricator based in Wisconsin. Specializing in over a hundred varieties of natural stone, they provide exceptional building veneers, custom cut stone, and landscape products for architectural projects. As a third-generation company with a nationwide presence, they pride themselves on delivering unparalleled expertise and a guaranteed, dependable experience in the natural stone industry | Source: https://www.ransomware.live/id/QnVlY2hlbCBTdG9uZUB0aGVnZW50bGVtZW4=

thegentlemen: Allensbach Volunteer

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Not Found | Website: feuerwehr-allensbach.de | Infostealer data confirmed. | ***.de The Allensbach Volunteer Fire Brigade is the local fire service responsible for fire suppression, technical rescue, and emergency response in the municipality of Allensbach, on Lake Constance. It is staffed by trained volunteers committed to continuous training and rapid deployment. The brigade also runs an active youth wing and public fire-safety education programmes | Source: https://www.ransomware.live/id/QWxsZW5zYmFjaCBWb2x1bnRlZXJAdGhlZ2VudGxlbWVu

thegentlemen: Scenic Hudson

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Public Sector | Website: scenichudson.org | Infostealer data confirmed. | ***.org zoominfo.com/c/scenic-hudson-inc/61506079 Scenic Hudson is a U.S. nonprofit environmental organization founded in 1963 to protect the Hudson River Valley’s natural beauty. It preserves scenic landscapes, creates public parks, and fights industrial pollution. Today, Scenic Hudson also champions clean energy, climate resilience, and environmental justice throughout the region | Source: https://www.ransomware.live/id/U2NlbmljIEh1ZHNvbkB0aGVnZW50bGVtZW4=

thegentlemen: Tokabei Japan

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Consumer Services | Tokabei is a Kyoto-based Japanese brand specialising in handcrafted textiles such as tenugui, furoshiki, and scarves. Their products are dyed using traditional aizome (indigo) techniques with natural indigo and historical patterns. The company is dedicated to preserving centuries-old craftsmanship while blending it with contemporary design | Source: https://www.ransomware.live/id/VG9rYWJlaSBKYXBhbkB0aGVnZW50bGVtZW4=

thegentlemen: Silmquinas e Equipamentos

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Manufacturing | Website: silmaquinas.com.br | Infostealer data confirmed. | ***.com.br zoominfo.com/c/silmquinas-e-equipamentos-ltda/425694871 Sil Maquinas is a Brazilian company specialising in the sale, rental, and servicing of construction, road-building, and agricultural machinery. Its product line includes rollers, pavers, excavators, and tractors from leading global brands. The company also supplies genuine parts and provides comprehensive after-sales support | Source: https://www.ransomware.live/id/U2lsbXF1aW5hcyBlIEVxdWlwYW1lbnRvc0B0aGVnZW50bGVtZW4=

thegentlemen: UiTM Holdings

Ransomware attack attributed to thegentlemen. | Country: MY | Sector: Education | Website: uitmholdings.com | Infostealer data confirmed. | ***.com zoominfo.com/c/ui-holdings-sdn-bhd/390203835 UiTM Holdings is the investment holding arm of Universiti Teknologi MARA (UiTM), Malaysia’s largest university. It commercialises the university’s assets and expertise across property, healthcare, education, and technology. Its primary mission is to generate sustainable revenue to support UiTM’s academic and research programmes | Source: https://www.ransomware.live/id/VWlUTSBIb2xkaW5nc0B0aGVnZW50bGVtZW4=

thegentlemen: Institucion Cervantes

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Education | Website: cervantes.edu.ar | Infostealer data confirmed. | ***.edu.ar zoominfo.com/c/institución-cervantes/372383480 nstitucion Cervantes is a private higher education institution based in Córdoba, Argentina, with over 60 years of history and more than 3,000 students. The school specializes in short-term, future-oriented careers ranging from one to three years, focusing on practical fields like Business Administration, Data Science, IT, and Law. It is highly recognized in the region for its strong commitment to student development and rapid professional integration into the job market | Source: https://www.ransomware.live/id/SW5zdGl0dWNpb24gQ2VydmFudGVzQHRoZWdlbnRsZW1lbg==

thegentlemen: Empty

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Not Found | Website: empty.es | Infostealer data confirmed. | ***.es zoominfo.com/c/empty/439336503 Empty is a prominent Spanish construction and architecture firm headquartered in Madrid, specializing in the execution of complex architectural, museum, and exhibition projects. With a team of over 50 professionals and offices in Madrid, Barcelona, and Paris, the company excels in mobilizing technical resources to deliver high-profile builds, such as the Spanish Pavilion at Expo Dubai 2020 and BBVA’s "La Vela" headquarters. Founded with the vision of redefining the construction industry, Empty acts as a comprehensive partner for drafting and executing large-scale, sophisticated structures | Source: https://www.ransomware.live/id/RW1wdHlAdGhlZ2VudGxlbWVu

thegentlemen: Integrated Distribution

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Transportation/Logistics | Website: int-dist.com | Infostealer data confirmed. | ***.com zoominfo.com/c/integrated-distribution-inc/348479499 ntegrated Distribution Inc. is a prominent industrial distributor based in Comstock Park, Michigan, serving local manufacturers since 1998. The company specializes in fast-response sourcing, technical support, and the supply of critical components such as bearings, belts, motors, and power transmission parts. With a strong focus on minimizing equipment downtime, IDI provides tailored industrial solutions for diverse sectors, including automotive, food processing, and packaging | Source: https://www.ransomware.live/id/SW50ZWdyYXRlZCBEaXN0cmlidXRpb25AdGhlZ2VudGxlbWVu

thegentlemen: Yao Yuan Technology

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Technology | Website: ssat168.com.tw | Infostealer data confirmed. | ***.com.tw Yao Yuan Technology Co., Ltd. is a Taiwanese enterprise specializing in computer peripheral products, electronic components, and raw materials for the plastics and rubber industries. The company focuses on providing specialized plastic parts coating and comprehensive material solutions to support diverse manufacturing and technology sectors. Operating as a dedicated B2B supplier, they deliver reliable sourcing and distribution services tailored to the precise needs of industrial and electronic production | Source: https://www.ransomware.live/id/WWFvIFl1YW4gVGVjaG5vbG9neUB0aGVnZW50bGVtZW4=

thegentlemen: Goldlion

Ransomware attack attributed to thegentlemen. | Country: HK | Sector: Consumer Services | Website: goldlion.com | Infostealer data confirmed. | ***.com zoominfo.com/c/goldlion-holdings/43517873 Goldlion is a prominent Hong Kong-based investment holding company listed on the HKEX, primarily engaged in the design, manufacturing, and distribution of premium men's apparel and accessories. Operating under the renowned Goldlion brand, the company specializes in high-quality business formalwear, including ties, shirts, and leather goods, across mainland China, Hong Kong, and Singapore. With decades of industry presence, it remains a preferred choice for contemporary men's fashion and professional lifestyle products | Source: https://www.ransomware.live/id/R29sZGxpb25AdGhlZ2VudGxlbWVu

thegentlemen: Danzo Group

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Not Found | Website: danzogroup.com | Infostealer data confirmed. | ***.com zoominfo.com/c/danzo-group-inc/437505508 Danzo Group is a premier commercial and residential contracting company based in the Los Angeles area, specializing in custom cabinetry and high-end woodworking solutions. Founded in 2005 and operating from a 7,000-square-foot facility in Pomona, California, the company delivers bespoke millwork, custom furniture, and interior storage systems. With a strong focus on fine craftsmanship, they serve diverse clients by providing comprehensive general contracting and tailored design services | Source: https://www.ransomware.live/id/RGFuem8gR3JvdXBAdGhlZ2VudGxlbWVu

thegentlemen: Jyharn Electronic

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Manufacturing | Website: jyharn.com | Infostealer data confirmed. | ***.com zoominfo.com/c/jyharn-electronic-tech-co-ltd/370944477 Jyharn Electronic Tech. Co., Ltd. is a professional electronic components distributor founded in 1992, headquartered in Taiwan with branch operations in Shenzhen. The company specializes in supplying a wide range of semiconductor and optoelectronic parts, representing major industry brands such as LITEON, FITIPOWER, UTC, and Lattice. With decades of experience, Jyharn delivers comprehensive component solutions, including power management ICs, LEDs, and diodes, to support global manufacturing and technology clients | Source: https://www.ransomware.live/id/SnloYXJuIEVsZWN0cm9uaWNAdGhlZ2VudGxlbWVu

thegentlemen: Central Arkansas Pediatrics

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: central-pediatrics.edan.io | Infostealer data confirmed. | ***.edan.io zoominfo.com/c/central-arkansas-pediatrics/1340337263 Central Arkansas Pediatrics is a specialized healthcare provider based in Conway, Arkansas, dedicated to pediatric special needs care. The clinic offers comprehensive services, including developmental preschool programs and therapy support for children across the state. Their digital presence is hosted on edan.io, a streamlined platform used by medical practices to provide accessible online resources for patients | Source: https://www.ransomware.live/id/Q2VudHJhbCBBcmthbnNhcyBQZWRpYXRyaWNzQHRoZWdlbnRsZW1lbg==

thegentlemen: FESCO Adecco

Ransomware attack attributed to thegentlemen. | Country: RU | Sector: Business Services | Website: fescoadecco.com | Infostealer data confirmed. | ***.com zoominfo.com/c/fesco-adecco/345603628 FESCO Adecco is a leading human resources provider in China, established as a strategic joint venture between Beijing FESCO and the global Adecco Group. The company delivers comprehensive HR solutions, including talent acquisition, staffing, payroll outsourcing, and business process outsourcing for multinational and domestic enterprises. Backed by a vast nationwide network, it helps organizations navigate the complex Chinese labor market and optimize their workforce strategies | Source: https://www.ransomware.live/id/RkVTQ08gQWRlY2NvQHRoZWdlbnRsZW1lbg==

thegentlemen: IP Rings

Ransomware attack attributed to thegentlemen. | Country: IE | Sector: Technology | Website: iprings.com | Infostealer data confirmed. | ***.com zoominfo.com/c/ip-rings-ltd/62719470 IP Rings Ltd is an India-based automotive component manufacturer and a member of the Amalgamations Group, founded in 1991. The company specializes in producing piston rings, high-precision forgings, and crank pins using advanced orbital cold forming technology. It is a publicly traded corporation with over 500 employees, serving global clients with cutting-edge surface treatments and high-quality parts | Source: https://www.ransomware.live/id/SVAgUmluZ3NAdGhlZ2VudGxlbWVu

thegentlemen: Metroply

Ransomware attack attributed to thegentlemen. | Sector: Not Found | Website: metroply.com | Infostealer data confirmed. | ***.com zoominfo.com/c/metroply/353622883 Metroply is one of the largest wood-based panel manufacturers in Thailand and Southeast Asia, boasting over 70 years of industry experience. The company specializes in producing a comprehensive range of engineered wood products, including particle board, MDF, plywood, hardboard, and doors. Utilizing reliable automated technology, Metroply is recognized as a regional leader in delivering world-class quality wood substitutes and building materials | Source: https://www.ransomware.live/id/TWV0cm9wbHlAdGhlZ2VudGxlbWVu

thegentlemen: Trigon America

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: trigonamerica.com | Infostealer data confirmed. | ***.com zoominfo.com/c/trigon-america/560898982 Trigon America is a premier contract manufacturer based in Aurora, Illinois, specializing in precision-machined complex components and assemblies. Founded in 2000, the company serves the highly regulated Medical Device and Aerospace industries, holding both ISO 13485 and AS9100 certifications. With decades of expertise, they focus on delivering world-class manufacturing solutions for intricate instrumentation and critical medical equipment | Source: https://www.ransomware.live/id/VHJpZ29uIEFtZXJpY2FAdGhlZ2VudGxlbWVu

thegentlemen: Tress

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: tress.com | Infostealer data confirmed. | ***.com zoominfo.com/c/tress-as/430422624 Tress is a leading Scandinavian supplier of sports, play, and leisure equipment, headquartered in Denmark and operating across the Nordic countries. The company specializes in providing high-quality gear and playground solutions for schools, kindergartens, and sports clubs. With decades of industry experience, Tress focuses on creating active and inclusive environments for children and athletes through its comprehensive product range | Source: https://www.ransomware.live/id/VHJlc3NAdGhlZ2VudGxlbWVu

thegentlemen: The Clinic

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Healthcare | Website: wfsportscare.com | Infostealer data confirmed. | ***.com zoominfo.com/c/the-clinic/537916104 The Clinic: Family and Sports Chiropractic is a specialized healthcare facility located in West Fargo, North Dakota, dedicated to providing patient-focused chiropractic care | Source: https://www.ransomware.live/id/VGhlIENsaW5pY0B0aGVnZW50bGVtZW4=

thegentlemen: WCM Remedium

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Healthcare | Website: wcm-remedium.pl | Infostealer data confirmed. | ***.pl WCM Remedium (Wielkopolskie Centra Medyczne Remedium) is a private healthcare provider based in Poznań and Śrem, Poland, offering comprehensive medical services to both public insurance (NFZ) and private patients. | Source: https://www.ransomware.live/id/V0NNIFJlbWVkaXVtQHRoZWdlbnRsZW1lbg==

thegentlemen: Downriver Medical Associates

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: downrivermedicalassociates.com | Infostealer data confirmed. | ***.com ***.com/c/downriver-medical-associates/357511215 Downriver Medical Associates is a full-service medical office and urgent care center located in Wyandotte, Michigan. Specializing in internal medicine and family practice, they provide comprehensive primary care for patients of all ages. The clinic focuses on holistic healthcare, emphasizing wellness, disease prevention, and improving the overall quality of life for the local community | Source: https://www.ransomware.live/id/RG93bnJpdmVyIE1lZGljYWwgQXNzb2NpYXRlc0B0aGVnZW50bGVtZW4=

thegentlemen: Michigan Surgical Center

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: www.michigansurgicalcenter.com | www.***.com https://www.***.com/c/michigan-surgical-center-llc/90769926 Michigan Surgical Center is an outpatient surgical facility specializing in ophthalmic and plastic surgeries, with over 25 years of experience. The center is physician-owned and has received multiple awards for quality care, including recognition as one of America's Best Ambulatory Surgical Centers by Newsweek. Their mission focuses on providing high-quality, patient-centered care with an emphasis on value-based services. They aim to lead in outpatient surgical care through innovative methodologies and a commitment to integrity and respect. 2075 Coolidge Rd, East Lansing, Michigan | Source: https://www.ransomware.live/id/TWljaGlnYW4gU3VyZ2ljYWwgQ2VudGVyQHRoZWdlbnRsZW1lbg==

thegentlemen: Thoresen Thai Agencies

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Transportation/Logistics | Website: thoresen.com | Infostealer data confirmed. | ***.com ***.com/c/thoresen-thai-agencies-plc/56951398 Thoresen is a strategic investment holding company listed on the Stock Exchange of Thailand, with a maritime heritage dating back to 1904. Its core business, Thoresen Shipping, operates a modern fleet of dry bulk carriers transporting commodities like ore, coal, grain, and steel across global trade routes. The group serves major industrial clients in mining, agriculture, and energy sectors, combining owned and chartered vessels to deliver flexible, reliable logistics solutions | Source: https://www.ransomware.live/id/VGhvcmVzZW4gVGhhaSBBZ2VuY2llc0B0aGVnZW50bGVtZW4=

thegentlemen: Edgewood Surgical Hospital

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: edgewoodsurgical.com | Infostealer data confirmed. | ***.com ***.com/c/edgewood-surgical-hospital/52612741 Edgewood Surgical Hospital is a state-of-the-art specialty medical facility located in Transfer, Pennsylvania USA. We have your data filles ~500gb SURGICAL CASE REVIEWS 2025-2026 2026 January SURGICAL CASE REVIEW 2026 March Surgical Case ***.docx 2025 JANUARY PEER SURGICAL CASE REVIEW 2025 MARCH SURGICAL CASE REVIEW 2025 MAY SURGICAL CASE REVIEW 2025 JULY SURGICAL CASE REVIEW 2025 SEPTEMBER SURGICAL CASE REVIEW 2025 NOVEMBER SURGICAL CASE REVIEW GOODMAN HP STI pdf Name + sexually transmitted infection (~300+ Anesthesia Records Anesthesia Records) Massive PHI leak — names + medical data of hundreds of patients MRI SCANS / EMPLOYEE HEALTH HISTORY & PHYSICAL (HP) Narcotic outdates + INPATIENT NARCOTIC INVENTORY | Source: https://www.ransomware.live/id/RWRnZXdvb2QgU3VyZ2ljYWwgSG9zcGl0YWx...

thegentlemen: Kunal Enterprises

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Not Found | Website: kunalenterprise.com | Infostealer data confirmed. | ***.com Kunal Enterprises is not a single global corporation, but rather a popular name shared by several independent industrial and manufacturing companies across India. Depending on the region, businesses operating under this brand specialize in diverse sectors such as paper packaging, industrial weighing systems, engineering, and chemical manufacturing. Notable examples include a prominent screen-printing solution provider established in 2001 and a major paper industry supplier founded in 1992. These firms primarily serve the B2B market, delivering specialized equipment, infrastructure, and manufacturing services to their clients | Source: https://www.ransomware.live/id/S3VuYWwgRW50ZXJwcmlzZXNAdGhlZ2VudGxlbWVu

thegentlemen: 3E Accounting

Ransomware attack attributed to thegentlemen. | Country: SG | Sector: Business Services | Website: 3ecpa.com.sg | Infostealer data confirmed. | ***.com.sg ***.com/c/3e-accounting-pte-ltd/431955167 3E Accounting is a premier corporate services provider in Singapore, offering a comprehensive one-stop solution for business setup and management. The award-winning firm specializes in seamless online company registration, corporate secretarial work, accounting, and taxation. Through its fast and secure digital approach, the agency successfully helps both local and international entrepreneurs establish and grow their ventures | Source: https://www.ransomware.live/id/M0UgQWNjb3VudGluZ0B0aGVnZW50bGVtZW4=

thegentlemen: Liztex Guatemala

Ransomware attack attributed to thegentlemen. | Country: GT | Sector: Manufacturing | Website: liztex.com | Infostealer data confirmed. | ***.com Liztex is a leading Guatemalan textile manufacturer with over 50 years of experience in producing fabrics. We want to inform you that our group managed to breach and encrypt Liztex network.  398GB leaked from there as a result of this breach.  What kind of data leaked:  - SAP data  - contacts  - contracts  - planning  - logistics  - projects data  - personal data  - employee data  - medical data  - partners data  - customers data  - financial data  - correspondence  - production data  - quality control data  - offers and proposals  - subsidiary data  - other sensitive business data | Source: https://www.ransomware.live/id/TGl6dGV4IEd1YXRlbWFsYUB0aGVnZW50bGVtZW4=

thegentlemen: TeLoh

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Not Found | Website: te-loh.de | Infostealer data confirmed. | ***.de ***.co/te-loh-michael-korn-gmbh-profile_b7c5fa01c183a43f TE-LOH Germany GmbH is an established Electronics Manufacturing Services provider located in Norderstedt, Germany. With over 30 years of industry experience, the company specializes in circuit board assembly, cable harness production, and complete electronic device manufacturing. They offer comprehensive, tailor-made solutions from a single source, focusing primarily on high-quality small to medium production series | Source: https://www.ransomware.live/id/VGVMb2hAdGhlZ2VudGxlbWVu

thegentlemen: Soja de Portugal

Ransomware attack attributed to thegentlemen. | Country: PT | Sector: Agriculture and Food Production | Website: write.as | Infostealer data confirmed. | ***.pt ***.com/c/soja-de-portugal/458493209 491GB leaked from there as a result of this breach. What kind of data leaked: - SAP data - contacts - contracts - planning - logistics - projects data - personal data - employee data - partners data - customers data - financial data - correspondence - production data - quality control data - offers and proposals - data related to Sorgal, Avicasal, Savinor and other brands - other sensitive business data Instead of negotiations, threats were made and the leaked data was not even reported to anyone here is the text they wrote https://***.as/***.md | Source: https://www.ransomware.live/id/U29qYSBkZSBQb3J0dWdhbEB0aGVnZW50bGVtZW4=

thegentlemen: Soniva Dental

Ransomware attack attributed to thegentlemen. | Country: PK | Sector: Healthcare | Website: sonivadental.com | Infostealer data confirmed. | ***.com ***.co/soniva-dental-care-profile_b73bd863c7ef0f15 Soniva Dental is a premier Texas-based dental clinic recognized for setting a benchmark in excellence and comprehensive oral healthcare. With over 15 years of trusted experience, the practice integrates 13 branches of dentistry under one roof, supported by state-of-the-art equipment and a world-class CAD-CAM dental laboratory. From routine check-ups to advanced dental implants, their dedicated team is committed to delivering high-quality, patient-focused care that creates healthier, beautiful smiles | Source: https://www.ransomware.live/id/U29uaXZhIERlbnRhbEB0aGVnZW50bGVtZW4=

thegentlemen: National Industries

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Manufacturing | Website: nationalindustries.in | Infostealer data confirmed. | ***.in ***.com/c/national-industries/453107978 Established in 1976 in Ludhiana, National Industries is a premier automotive manufacturing enterprise and a core part of the esteemed Metalman Group. Specializing in precision-engineered components, the company supplies high-quality parts to top-tier two-wheeler brands, combining decades of expertise with modern manufacturing excellence. With a strong foundation in engineering innovation and award-winning workplace practices, National Industries continues to drive reliability and technological advancement in the automotive sector | Source: https://www.ransomware.live/id/TmF0aW9uYWwgSW5kdXN0cmllc0B0aGVnZW50bGVtZW4=

thegentlemen: Bouri Group

Ransomware attack attributed to thegentlemen. | Country: TN | Sector: Not Found | Website: bouri.net | Infostealer data confirmed. | ***.net ***.com/c/bouri-group/356964813 Established in 1976, Bouri Group is a prominent Egyptian enterprise specializing in the manufacturing, importing, and retail distribution of premium home essentials and electrical appliances. As a leading provider of energy-efficient household solutions, the company offers an extensive portfolio of trusted international brands across kitchenware, houseware, and personal care. Through its comprehensive retail network and modern digital platforms, Bouri consistently delivers high-quality, durable products designed to equip and enhance everyday living | Source: https://www.ransomware.live/id/Qm91cmkgR3JvdXBAdGhlZ2VudGxlbWVu

thegentlemen: Computime Group

Ransomware attack attributed to thegentlemen. | Country: HK | Sector: Technology | Website: computime.com | Infostealer data confirmed. | ***.com ***.com/c/computime-group-ltd/9208093 Computime is a global electronics engineering and manufacturing partner that has been pioneering intelligent control solutions since 1974. Delivering end-to-end services from initial concept to final delivery, the company specializes in designing advanced electronic controls for the appliance, HVAC, smart home, and medical industries. With a strong commitment to innovation, Computime empowers brands worldwide with cutting-edge technology that enables smarter and more sustainable living | Source: https://www.ransomware.live/id/Q29tcHV0aW1lIEdyb3VwQHRoZWdlbnRsZW1lbg==

thegentlemen: Harrell Martin Peace

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: harrellmartinpeace.com | Infostealer data confirmed. | ***.com ***.com/c/harrell-martin--peace-pa/347464411 Established in 1995, Harrell, Martin & Peace, P.A. is a highly regarded full-service law firm based in Chapin, South Carolina, celebrated for its community-focused approach and deep client relationships. The firm delivers comprehensive legal expertise across diverse practice areas, including real estate, corporate law, estate planning, and family law. Backed by a dedicated team of experienced attorneys, they are committed to providing personalized, strategic, and exceptional legal representation to both individuals and businesses | Source: https://www.ransomware.live/id/SGFycmVsbCBNYXJ0aW4gUGVhY2VAdGhlZ2VudGxlbWVu

thegentlemen: Brian Jessel BMW

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Consumer Services | Website: brianjesselbmw.com | Infostealer data confirmed. | ***.com ***.com/c/brian-jessel-bmw/347467232 Established in 1986, Brian Jessel BMW is one of Canada's premier luxury automotive dealerships, proudly located in Vancouver, British Columbia. Recognized as a top-tier retailer for both new and pre-owned vehicles, the company offers an extensive selection of BMW models alongside expert financing and comprehensive service solutions. With a dedicated team of over 200 professionals, they have built a decades-long legacy of delivering exceptional customer experiences and automotive excellence | Source: https://www.ransomware.live/id/QnJpYW4gSmVzc2VsIEJNV0B0aGVnZW50bGVtZW4=

thegentlemen: Fibrenoire

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Manufacturing | Website: fibrenoire.ca | Infostealer data confirmed. | ***.ca ***.com/c/fibrenoire-inc/347982087 Fibrenoire is a premier Canadian telecommunications provider specializing exclusively in high-speed, fiber-optic connectivity solutions tailored for business environments. Operating primarily across Quebec and Ontario as part of Videotron Business, they deliver mission-critical services including dedicated internet, private networks, VoIP, and cloud infrastructure. With an avant-garde approach, the company focuses on building robust, scalable, and secure networks that empower enterprises to thrive in a demanding digital landscape | Source: https://www.ransomware.live/id/RmlicmVub2lyZUB0aGVnZW50bGVtZW4=

thegentlemen: Smile Siam Printing Service

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Business Services | Website: smile-siam.com | Infostealer data confirmed. | ***.com ***.com/c/smile-siam-printing-service-co-ltd/355813513 Smile Siam Printing Service is a distinguished Bangkok-based printing house founded in 1995, offering comprehensive one-stop solutions in offset, digital, inkjet, and silk screen printing for local and international clients. With ISO-certified production facilities and a dedicated team, they ensure exceptional quality, competitive pricing, and seamless project management from design to delivery. Their integrated logistics and business services further streamline operations, making them a trusted partner for premium printed materials and corporate solutions | Source: https://www.ransomware.live/id/U21pbGUgU2lhbSBQcmludGluZyBTZXJ2aWNlQHRoZWdlbnRsZW1lbg==

thegentlemen: Arabian Procession Holding

Ransomware attack attributed to thegentlemen. | Country: SA | Sector: Business Services | Website: aph.com.sa | Infostealer data confirmed. | ***.com.sa ***.com/c/arabian-procession-holding/483326397 Established in 1989, Arabian Procession Holding (APH) is a prominent family-owned investment firm based in Riyadh, Saudi Arabia, managing a diversified portfolio across the aviation, real estate, contracting, and retail sectors. Over the past three decades, the company has expanded its strategic footprint, notably operating duty-free shops in Saudi international airports through high-profile joint ventures. Driven by a commitment to sustainable growth, APH continues to develop local and global brands, delivering exceptional value to businesses and consumers alike | Source: https://www.ransomware.live/id/QXJhYmlhbiBQcm9jZXNzaW9uIEhvbGRpbmdAdGhlZ2VudGxlbWVu

thegentlemen: Anandji Haridas

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Not Found | Website: ahcpl.com | Infostealer data confirmed. | ***.com ***.com/c/anandji-haridas--co-ltd/354316069 Anandji Haridas & Co. (AHCPL) is a pioneering Indian manufacturer with over seven decades of expertise in cold forming, tool design, and advanced sheet metal ***.As a fully certified OEM supplier, they specialize in producing high-precision, cost-effective critical automotive components and spun pulleys through integrated in-house ***.With a steadfast commitment to world-class quality, AHCPL remains a trusted partner for innovative and reliable sheet metal forming solutions | Source: https://www.ransomware.live/id/QW5hbmRqaSBIYXJpZGFzQHRoZWdlbnRsZW1lbg==

thegentlemen: M Rocha J Serra Lda

Ransomware attack attributed to thegentlemen. | Country: PT | Sector: Business Services | Website: mrjs.pt | Infostealer data confirmed. | ***.pt ***.com/c/m-rocha--j-serra-lda/541302825 M. Rocha & J. Serra (MRJS) is a distinguished Portuguese metalworking enterprise specializing in high-quality fabricated metal products and specialized components for electrical distribution networks. With a strong commitment to production flexibility and consistent quality, they utilize advanced equipment to meet the rigorous demands of the energy and industrial sectors | Source: https://www.ransomware.live/id/TSBSb2NoYSBKIFNlcnJhIExkYUB0aGVnZW50bGVtZW4=

thegentlemen: Suburban Water

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Energy | Website: suburbanwaterinc.com | Infostealer data confirmed. | ***.com ***.com/c/suburban-water-inc/350908787 Suburban Water, Inc. is a dedicated public water utility based in Basehor, Kansas, committed to delivering safe and reliable drinking water to local residential and commercial communities. Operating as a vital part of the regional infrastructure, the company prioritizes strict water quality standards, sustainable resource management, and exceptional customer service. Through continuous system maintenance and proactive operations, they ensure the long-term health, safety, and well-being of the neighborhoods they proudly serve | Source: https://www.ransomware.live/id/U3VidXJiYW4gV2F0ZXJAdGhlZ2VudGxlbWVu

thegentlemen: Grupo Premier

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Consumer Services | Website: grupopremier.com.mx | Infostealer data confirmed. | grupopremier.com.mx zoominfo.com/c/grupo-premier/439704898 Grupo Premier is a leading Mexican company with 50+ years in importing, processing, and distributing nuts and dried fruits. They offer wholesale, retail, and industrial solutions with ISO 22000 certification and advanced quality control systems. The company operates nationwide distribution routes and serves as exclusive distributor for brands like Ocean Spray in Mexico. Headquartered in Mexico, they combine tradition, technology, and trust to deliver premium agricultural products across the country | Source: https://www.ransomware.live/id/R3J1cG8gUHJlbWllckB0aGVnZW50bGVtZW4=

thegentlemen: Fonderia Corra

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Manufacturing | Website: fonderiacorra.com | Infostealer data confirmed. | fonderiacorra.com zoominfo.com/c/fonderia-corrà/371359796 Fonderia Corra is an Italian foundry founded in 1946, specializing in high-precision cast iron components for industrial sectors like railway, energy, and machinery. With over 70 years of expertise, they offer in-house services from design optimization to final finishing, ensuring quality, waste reduction, and ISO 9001 certification. The company operates two plants in Thiene and Montebelluna, producing lamellar and spheroidal graphite cast iron using advanced automation and skilled professionals. Family-led since its founding, Fonderia Corra combines tradition, innovation, and passion to shape metal into core elements for demanding global industries | Source: https://www.ransomware.live/id/Rm9uZGVyaWEgQ29ycmFAdGhlZ2VudGxlbWVu

thegentlemen: Heartland Growers

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Agriculture and Food Production | Website: heartlandgrowers.com | Infostealer data confirmed. | heartlandgrowers.com zoominfo.com/c/heartland-growers/48466328 Heartland Growers is a family-owned wholesale greenhouse in Westfield, Indiana, operated by the Gapinski family since 1984. They supply spring annuals, holiday plants, and hydroponic produce to garden centers, florists, and retailers across the Midwest. Their 30-acre modern facility features advanced automation and a skilled workforce of up to 175 employees. Committed to innovation and quality, they combine decades of expertise with sustainable growing practices | Source: https://www.ransomware.live/id/SGVhcnRsYW5kIEdyb3dlcnNAdGhlZ2VudGxlbWVu

thegentlemen: Corporacion Prokompra

Ransomware attack attributed to thegentlemen. | Country: VE | Sector: Business Services | ***.com/business-directory/company-profiles.corporacion_prokompra_2020_ca.cafb282c8025c52485cccb47942fa6b9.html Corporacion Prokompra 2020, C.A. is a Venezuelan retail company based in Caracas, operating in the department store and general merchandise sector. The company is led by key principal Tsvi Kornbluth Seinfeld and focuses on home products, cosmetics, sporting goods, and novelty items. Registered in the Mercantile Registry of Caracas, it serves local consumers through traditional retail channels. The business combines regional market knowledge with diversified product offerings to meet everyday consumer needs in Venezuela | Source: https://www.ransomware.live/id/Q29ycG9yYWNpb24gUHJva29tcHJhQHRoZWdlbnRsZW1lbg==

thegentlemen: Techmar

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Technology | Website: techmar.com | Infostealer data confirmed. | techmar.com https://www.zoominfo.com/c/techmar-inc/37699777 is a Dutch company specializing in 12 Volt outdoor lighting solutions since 2002. Headquartered in Hengelo, Netherlands, it designs, produces, and supplies lighting fixtures globally.Products serve gardens, landscapes, and commercial applications with a focus on quality and innovation.The brand emphasizes in-house development, sustainability, and reliable low-voltage technology | Source: https://www.ransomware.live/id/VGVjaG1hckB0aGVnZW50bGVtZW4=

thegentlemen: Mayelia Automotive

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Manufacturing | Website: mayelia.com | Infostealer data confirmed. | mayelia.com zoominfo.com/c/mayelia-automotive/480899337 is an Ivorian automotive company specializing in vehicle technical inspections.Founded in 2019, it operates under Mayelia Participations holding across multiple African sectors.Services include technical checks, stickers, and corporate solutions for drivers and businesses.The company emphasizes customer service, modern equipment, and road safety education | Source: https://www.ransomware.live/id/TWF5ZWxpYSBBdXRvbW90aXZlQHRoZWdlbnRsZW1lbg==

thegentlemen: Sanatorio Delta

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Healthcare | Website: sanatoriodelta.com | Infostealer data confirmed. | sanatoriodelta.com zoominfo.com/c/sanatorio-delta/533085034 private healthcare institution in Rosario, Argentina, with over 40 years of medical excellence and patient-centered care. Delivers comprehensive services across 50+ specialties through 10 modern facilities, including cardiology, trauma care, and advanced diagnostics. A dedicated team of 250+ professionals, seamless online scheduling, and 24/7 emergency support ensure exceptional health outcomes for every patient | Source: https://www.ransomware.live/id/U2FuYXRvcmlvIERlbHRhQHRoZWdlbnRsZW1lbg==

thegentlemen: Seeley Office Systems

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Business Services | Website: seeleyoffice.com | Infostealer data confirmed. | seeleyoffice.com zoominfo.com/c/seeley-office-systems-inc/347773140 family-owned business since 1981, based in Glens Falls, New York. They deliver comprehensive office solutions: from printers and MFPs to managed print services and supply procurement. Focused on boosting business productivity through personalized service and competitive pricing across the Capital and Adirondack regions | Source: https://www.ransomware.live/id/U2VlbGV5IE9mZmljZSBTeXN0ZW1zQHRoZWdlbnRsZW1lbg==

thegentlemen: Le Perreux sur Marne

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Not Found | Website: leperreux94.fr | Infostealer data confirmed. | leperreux94.fr official municipal portal of this Parisian suburb, offering residents access to e-services: ID appointment booking, local event calendars, transport schedules, and social programs. The site serves as a central hub for citizen engagement with local government and real-time community updates | Source: https://www.ransomware.live/id/TGUgUGVycmV1eCBzdXIgTWFybmVAdGhlZ2VudGxlbWVu

thegentlemen: Openmind Networks

Ransomware attack attributed to thegentlemen. | Sector: Technology | Website: openmindnetworks.com | Infostealer data confirmed. | openmindnetworks.com zoominfo.com/c/openmind-networks-ltd/351059313 Dublin-based independent technology firm with 20+ years of expertise in mobile messaging infrastructure. Delivers advanced software solutions for telecom operators: intelligent message routing, AI-powered fraud prevention, and RCS business messaging platforms for the 5G era. Processes over 1.5 billion messages daily for a global clientele of leading mobile carriers and wholesale aggregators, with annual revenue of approximately $20.1 million | Source: https://www.ransomware.live/id/T3Blbm1pbmQgTmV0d29ya3NAdGhlZ2VudGxlbWVu

thegentlemen: Koa Glass

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Manufacturing | Website: koaglass.co.jp | Infostealer data confirmed. | koaglass.co.jp zoominfo.com/c/koa-glass-co-ltd/347978270 prestigious Japanese glass packaging manufacturer established in 1943 and headquartered in Tokyo. Specializes in high-end glass containers for cosmetics, fragrance, and pharmaceuticals, delivering end-to-end solutions: design, production, decoration, and innovative antibacterial "Million Guard" technology. With 500+ employees and facilities across Japan and China, Koa Glass serves global luxury brands including Chanel, Shiseido, L'Oreal, and Estee Lauder | Source: https://www.ransomware.live/id/S29hIEdsYXNzQHRoZWdlbnRsZW1lbg==

thegentlemen: ACAM Systemautomation

Ransomware attack attributed to thegentlemen. | Country: AT | Sector: Manufacturing | Website: acam.at | Infostealer data confirmed. | acam.at zoominfo.com/c/acam-systemautomation-gmbh/431028608 Austrian engineering firm with 30+ years of expertise, headquartered in Leoben. Delivers integrated solutions for product development and manufacturing, featuring Siemens Digital Industries Software (PLM), simulation tools, and manufacturing management systems. Serves SMEs to multinational corporations with comprehensive training and support, driving operational efficiency and transparency across the entire product lifecycle | Source: https://www.ransomware.live/id/QUNBTSBTeXN0ZW1hdXRvbWF0aW9uQHRoZWdlbnRsZW1lbg==

thegentlemen: TRANSSYSTEM Group

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Transportation/Logistics | Website: transsystem.pl | Infostealer data confirmed. | transsystem.pl Polish engineering powerhouse with 30+ years of expertise in designing and manufacturing advanced technological transport systems and steel structures. Delivers turnkey intralogistics solutions for automotive, tire, and industrial sectors, with 200+ successful projects across 30+ countries worldwide. Trusted by global leaders including Tesla, Goodyear, Michelin, Continental, and KUKA for innovation, precision, and operational excellence | Source: https://www.ransomware.live/id/VFJBTlNTWVNURU0gR3JvdXBAdGhlZ2VudGxlbWVu

thegentlemen: Caka Grup Lojistik

Ransomware attack attributed to thegentlemen. | Country: TR | Sector: Transportation/Logistics | Website: cakagrup.com | Infostealer data confirmed. | cakagrup.com Turkish logistics provider delivering end-to-end solutions for domestic and international freight operations. Core services include warehousing, customs clearance, import-export facilitation, plus specialized trade in glass mosaic and packaging materials. Built on principles of speed, quality, and cost-efficiency, the company advances as a sector pioneer through expert teamwork and unwavering commitment to customer satisfaction. | Source: https://www.ransomware.live/id/Q2FrYSBHcnVwIExvamlzdGlrQHRoZWdlbnRsZW1lbg==

thegentlemen: Hussey Seatway

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Transportation/Logistics | Website: husseyseatway.com | Infostealer data confirmed. | husseyseatway.com zoominfo.com/c/hussey-seatway-ltd/137888631 UK-based specialist founded in 2002, expert in designing, manufacturing, and installing retractable, fixed, and portable seating systems for global venues. Serving education, sports, and performing arts sectors with 50+ installations yearly, including prestigious projects like the Royal Opera House and Alexandra Palace. End-to-end support covers consultancy, bespoke engineering, professional installation, and lifetime after-sales care. | Source: https://www.ransomware.live/id/SHVzc2V5IFNlYXR3YXlAdGhlZ2VudGxlbWVu

thegentlemen: MBM Corp

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: mbmcorp.com | Infostealer data confirmed. | mbmcorp.com rocketreach.co/mbm-corp-profile_b5efe288f42e7251 MBM Corporation, founded in 1936 and headquartered in Charleston, South Carolina, is a trusted leader in professional print finishing and document security solutions. Renowned for Destroyit® shredders, Triumph™ cutters, and AeroCut® digital finishing systems, MBM empowers print shops and businesses with precision-engineered equipment backed by expert support and industry-leading warranties | Source: https://www.ransomware.live/id/TUJNIENvcnBAdGhlZ2VudGxlbWVu

thegentlemen: Grupo Pasquel

Ransomware attack attributed to thegentlemen. | Country: EC | Sector: Agriculture and Food Production | Website: grupopasquel.com | Infostealer data confirmed. | grupopasquel.com zoominfo.com/c/grupo-pasquel/430007218 Grupo Pasquel is a well-established Ecuadorian enterprise from Quito, with over three decades of excellence in construction and hardware retail. Through its Mi Ferre brand, it delivers quality products and integrated solutions, empowering builders and DIY enthusiasts nationwide with trusted service and logistics | Source: https://www.ransomware.live/id/R3J1cG8gUGFzcXVlbEB0aGVnZW50bGVtZW4=

thegentlemen: YMCA of Columbia

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Consumer Services | Website: columbiaymca.org | Infostealer data confirmed. | columbiaymca.org zoominfo.com/c/ymca-of-columbia/8912958 Founded in 1854, the YMCA of Columbia is a cornerstone charitable organization dedicated to building healthy spirit, mind, and body for all across South Carolina's Midlands. Through five community branches, they deliver impactful youth development, wellness programs, and social responsibility initiatives rooted in Christian values of caring, respect, and inclusion. Every day, the Y empowers neighbors of all ages and backgrounds to learn, grow, and thrive together | Source: https://www.ransomware.live/id/WU1DQSBvZiBDb2x1bWJpYUB0aGVnZW50bGVtZW4=

thegentlemen: Polyrack

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Manufacturing | Website: polyrack.com | Infostealer data confirmed. | polyrack.com zoominfo.com/c/polyrack-ag/30835122 POLYRACK tech-group is a German family-owned engineering company founded in 1979, specializing in high-quality electronic packaging solutions and customized mechanical systems. They design and manufacture subracks, aluminum housings, backplanes, and ruggedized components for demanding industries like aerospace, medical technology, telecommunications, and transportation. With over 45 years of expertise and 500+ employees worldwide, POLYRACK delivers innovative, future-oriented solutions that combine precision engineering with reliable series production | Source: https://www.ransomware.live/id/UG9seXJhY2tAdGhlZ2VudGxlbWVu

thegentlemen: Internal Medicine

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: internalmedicineofswf.com | Infostealer data confirmed. | internalmedicineofswf.com zoominfo.com/c/internal-medicine-of-southwest-florida/559515842 a private, physician-owned primary care practice founded in 1998 and located in Fort Myers, FL . The site provides patient resources, contact information, office hours, and details about their proactive, preventative healthcare services. They focus on quality, patient-centric care for both wellness visits and urgent medical needs | Source: https://www.ransomware.live/id/SW50ZXJuYWwgTWVkaWNpbmVAdGhlZ2VudGxlbWVu

thegentlemen: DEVO-Tech

Ransomware attack attributed to thegentlemen. | Country: CH | Sector: Technology | Website: devo-tech.ch | Infostealer data confirmed. | devo-tech.ch zoominfo.com/c/devo-tech-ag/430812943 DEVO-Tech AG is a Swiss family-owned engineering company from Ziefen, specializing in custom mechanical solutions for apparatus engineering, vacuum lifting technology, and tunnel construction since 1997. With 25+ years of expertise and a team of 30+ professionals, they deliver high-precision, flexible manufacturing and full-cycle project support — from planning to production. Their innovations serve clients in 45+ countries, combining Swiss quality, sustainability, and reliable partnership for complex industrial challenges | Source: https://www.ransomware.live/id/REVWTy1UZWNoQHRoZWdlbnRsZW1lbg==

thegentlemen: University of Finance and Administration

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Education | Website: vsfs.cz | Infostealer data confirmed. | vsfs.cz rocketreach.co/university-of-finance-and-administration-prague-profile_b5c5d93ff42e0e40 University of Finance and Administration is a prestigious private university in Prague, founded in 1999 and recognized as one of the Czech Republic's first private business schools. With campuses in Prague, Karlovy Vary, and Most, it offers modern bachelor's, master's, and doctoral programs in economics, finance, law, marketing, and IT — taught in Czech, English, and Russian. Combining academic excellence with practical focus, VŠFS empowers over 5,000 students through flexible study formats, international partnerships, and strong industry connections | Source: https://www.ransomware.live/id/VW5pdmVyc2l0eSBvZiBGaW5hbmNlIGFuZCBBZG1pbmlzdHJhdGlvbkB0aGVnZW50bGVtZW4=

thegentlemen: Modern Display

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: moderndisplay.com | Infostealer data confirmed. | moderndisplay.com zoominfo.com/c/modern-display/25347032 odern Display is a beloved family-owned retail destination in Salt Lake City, Utah, founded in 1946 and specializing in seasonal décor, holiday treasures, and home accents. With 150+ team members and a 300,000 sq. ft. facility, they offer everything from Christmas trees and patriotic flags to floral arrangements and parade float supplies. Beyond retail, they power expo services, wholesale floral, and graphic design—helping customers celebrate life's special moments with beauty and joy for nearly 80 years | Source: https://www.ransomware.live/id/TW9kZXJuIERpc3BsYXlAdGhlZ2VudGxlbWVu

thegentlemen: Internet Technologies Designs

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Technology | Website: itd-system.com | Infostealer data confirmed. | itd-system.com zoominfo.com/c/internet-technologies-designs/529178114 ITD System is a French IT solutions integrator founded in 1994, specializing in adaptable digital tools for business productivity. They deliver customized software, VoIP telephony, CRM integration, and secure infrastructure services tailored to SMEs. With offices in Mâcon, Moulins, and Paray-le-Monial, the company combines local proximity with technical expertise to support digital transformation | Source: https://www.ransomware.live/id/SW50ZXJuZXQgVGVjaG5vbG9naWVzIERlc2lnbnNAdGhlZ2VudGxlbWVu

thegentlemen: E-Control Systems

Ransomware attack attributed to thegentlemen. | Country: AT | Sector: Technology | Website: econtrolsystems.com | Infostealer data confirmed. | econtrolsystems.com zoominfo.com/c/e-control-systems-inc/34461104 E-Control Systems is a California-based technology leader founded in 1998, specializing in IoT-powered wireless temperature monitoring solutions for critical environments. Their turnkey FusionLive™ platform delivers real-time alerts, cloud-based dashboards, and regulatory compliance tools for food service, healthcare, life sciences, and retail industries. With 5,000+ installations nationwide, ECS combines custom-engineered hardware and intuitive software to safeguard products, ensure safety standards, and streamline operations 24/7 | Source: https://www.ransomware.live/id/RS1Db250cm9sIFN5c3RlbXNAdGhlZ2VudGxlbWVu

thegentlemen: Ross Yerger Insurance

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Financial Services | Website: rossandyerger.com | Infostealer data confirmed. | rossandyerger.com zoominfo.com/c/ross--yerger-insurance-inc/101253758 Ross & Yerger is an employee-owned independent insurance agency founded in 1860, specializing in personalized risk management and insurance solutions for businesses and individuals. Their "Lighthouse" approach offers holistic protection beyond traditional policies, prioritizing client needs over shareholders. With a culture centered on relationships, community, and expertise in sectors like oil & gas and construction, they help clients protect what matters most | Source: https://www.ransomware.live/id/Um9zcyBZZXJnZXIgSW5zdXJhbmNlQHRoZWdlbnRsZW1lbg==

thegentlemen: Digiprint

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Manufacturing | Website: digiprint.pl | Infostealer data confirmed. | digiprint.pl zoominfo.com/c/digiprint/372856266 leading Polish company established in 2000 that delivers innovative solutions for the printing industry. They specialize in digital and flexographic printing technologies, wide-format production, and packaging design, partnering with global brands like HP Indigo and Esko. Beyond equipment sales, Digiprint provides expert installation, training, and after-sales support to help print businesses thrive in a digital era | Source: https://www.ransomware.live/id/RGlnaXByaW50QHRoZWdlbnRsZW1lbg==

thegentlemen: Instituut voor de Nederlandse

Ransomware attack attributed to thegentlemen. | Country: NL | Sector: Public Sector | Website: ivdnt.org | Infostealer data confirmed. | ivdnt.org rocketreach.co/instituut-voor-de-nederlandse-taal-profile_b45f686efc6979e6 It advances the study and preservation of Dutch through cutting-edge research, digital tools, and open-access resources covering vocabulary, grammar, dialects, and terminology. The institute curates authoritative references like the Algemene Nederlandse Spraakkunst for scholars, educators, and language enthusiasts worldwide | Source: https://www.ransomware.live/id/SW5zdGl0dXV0IHZvb3IgZGUgTmVkZXJsYW5kc2VAdGhlZ2VudGxlbWVu

thegentlemen: Grupo Alvorada

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Not Found | Website: galvorada.com | Infostealer data confirmed. | galvorada.com zoominfo.com/c/grupo-alvorada/536571880 a prestigious Brazilian family-owned agribusiness founded in the 1970s and based in São Paulo. The company specializes in the production and export of high-quality fertile eggs and day-old chicks, serving both domestic and international markets with a strong focus on biosecurity and antibiotic-free practices. With over 50 years of heritage, Grupo Alvorada combines tradition, innovation, and sustainability to deliver excellence in poultry genetics and animal nutrition | Source: https://www.ransomware.live/id/R3J1cG8gQWx2b3JhZGFAdGhlZ2VudGxlbWVu

thegentlemen: Ponisch Abogados

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Business Services | Website: poenisch.com.mx | Infostealer data confirmed. | poenisch.com.mx zoominfo.com/c/ponisch-abogados/557504173 German-Mexican business collaboration, specializing in professional services that may span legal advisory, consulting, or industrial solutions. Though public details are intentionally discreet, the company appears to value precision, cross-cultural expertise, and long-term partnerships. The website is currently under maintenance, reflecting a commitment to quality and continuous improvement. For the most accurate information, reaching out through professional channels once the site is live is recommended. | Source: https://www.ransomware.live/id/UG9uaXNjaCBBYm9nYWRvc0B0aGVnZW50bGVtZW4=

thegentlemen: Qatar National Broadband

Ransomware attack attributed to thegentlemen. | Country: QA | Sector: Telecommunication | Website: qnbn.qa | Infostealer data confirmed. | qnbn.qa zoominfo.com/c/qatar-national-broadband-network-qnbn/1121927707 Qatar National Broadband Network is a government-owned leader in passive fiber infrastructure, established in 2011 to power Qatar's digital transformation and National Vision 2030. With nationwide fiber-optic coverage, QNBN enables ultra-fast, secure connectivity for homes, businesses, and government through open access for all licensed service providers. Strategic partnerships with Microsoft and Carnegie Mellon Qatar underscore its commitment to innovation, AI readiness, and cyber-resilient infrastructure — all delivered with sustainability and future-ready excellence | Source: https://www.ransomware.live/id/UWF0YXIgTmF0aW9uYWwgQnJvYWRiYW5kQHRoZWdlbnRsZW1lbg==

thegentlemen: GeTeCe

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Not Found | Website: getece.com | Infostealer data confirmed. | getece.com zoominfo.com/c/getece-co-ltd/353619915 GeTeCe is Thailand's trusted ingredients partner since 1978, specializing in premium chemicals, fragrances, flavours, and food ingredients for diverse manufacturing industries. With four decades of expertise, a state-of-the-art blending facility, and strategic global partnerships, they deliver tailored solutions backed by deep market insights and regulatory compliance. Their dedicated technical team and reliable supply chain empower clients to innovate confidently and stay ahead in competitive markets across Southeast Asia | Source: https://www.ransomware.live/id/R2VUZUNlQHRoZWdlbnRsZW1lbg==

thegentlemen: Amstel Securities

Ransomware attack attributed to thegentlemen. | Country: NL | Sector: Financial Services | Website: amstelsecurities.com | Infostealer data confirmed. | amstelsecurities.com zoominfo.com/c/amstel-securities-llp/353641962 Amstel Securities is a premier independent brokerage firm founded in 1989, connecting Asian and global markets with 35+ years of expertise in fixed income, equities, and derivatives. As a trusted agency and matched-principal broker, they specialize in Southeast Asian domestic currency bonds, high-yield credit, and G7 markets, serving institutional clients with unbiased execution and deep liquidity. Backed by strategic partnerships with BNY Mellon's Pershing for clearing and custody, they deliver secure, efficient solutions for wealth managers, family offices, and accredited investors worldwide | Source: https://www.ransomware.live/id/QW1zdGVsIFNlY3VyaXRpZXNAdGhlZ2VudGxlbWVu

thegentlemen: Dodson & Horrell

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Agriculture and Food Production | Website: dodsonandhorrell.com | Infostealer data confirmed. | dodsonandhorrell.com zoominfo.com/c/dodson--horrell-ltd/21104188 Dodson Horrell is a world-leading, family-run feed manufacturer established in 1939, specializing in premium nutrition for horses, poultry, and zoo animals. With over 80 years of expertise, their science-backed formulations and dedicated Nutritional Helpline empower owners to care for every animal as an individual. As exclusive feed partners to the British Equestrian Teams and a trusted name across global equestrian communities, they combine heritage, innovation, and unwavering quality | Source: https://www.ransomware.live/id/RG9kc29uICYgSG9ycmVsbEB0aGVnZW50bGVtZW4=

thegentlemen: Value Exchange International

Ransomware attack attributed to thegentlemen. | Country: HK | Sector: Financial Services | Website: valueexch.com | Infostealer data confirmed. | valueexch.com Value Exchange International Inc. is a trailblazing retail technology leader with over 30 years of expertise, delivering comprehensive digital solutions across Asia, the UK, Australia, and New Zealand. Their 300+ professionals provide 24/7 Managed Operations, Systems Integration, and innovative retail hardware — from Electronic Shelf Labels to AI-powered inspection robots — powering 20,000+ daily POS transactions and HK$400+ billion in annual retail sales. With a customer-centric approach and cutting-edge technology, VEII empowers retailers to thrive through seamless digital transformation and operational excellence | Source: https://www.ransomware.live/id/VmFsdWUgRXhjaGFuZ2UgSW50ZXJuYXRpb25hbEB0aGVnZW50bGVtZW4=

thegentlemen: SETCAR

Ransomware attack attributed to thegentlemen. | Country: TN | Sector: Transportation/Logistics | Website: setcar.com.tn | Infostealer data confirmed. | setcar.com.tn zoominfo.com/c/setcar/507355731 SETCAR is Tunisia's pioneering private manufacturer of buses, coaches, and minibuses, with over 50 years of excellence since 1976. Partnering with global leaders like Volvo and Iveco, they produce up to 500 vehicles annually, serving public transport, tourism, and institutional clients across Africa and the Middle East. With a 300-strong expert team, advanced production facilities, and dedicated after-sales support, SETCAR delivers innovative, eco-friendly mobility solutions built for reliability and performance | Source: https://www.ransomware.live/id/U0VUQ0FSQHRoZWdlbnRsZW1lbg==

thegentlemen: Oriental Diamond

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Manufacturing | Website: orientaldiamond.jp | Infostealer data confirmed. | orientaldiamond.jp Oriental Diamond Inc. is a pioneering Japanese diamond enterprise established in 1966, specializing in the import, design, and manufacturing of fine diamond jewelry and loose stones. As the first company in Japan to earn the prestigious Sightholder qualification, they combine global sourcing with in-house craftsmanship to deliver conflict-free diamonds and elegant collections like Hoshi no Suna. With a heritage of excellence and a diversified portfolio spanning jewelry, bridal, and traditional kimono wholesale, they continue to innovate as a trusted market leader in Tokyo's luxury sector | Press: https://www.orientaldiamond.jp/お知らせ | Source: https://www.ransomware.live/id/T3JpZW50YWwgRGlhbW9uZEB0aGVnZW50bGVtZW4=

thegentlemen: Electroban SAE

Ransomware attack attributed to thegentlemen. | Country: PY | Sector: Manufacturing | Website: electroban.com.py | Infostealer data confirmed. | electroban.com.py zoominfo.com/c/electroban-sae/372861276 Electroban is a leading 100% Paraguayan retail company founded in 2007, specializing in home appliances, electronics, furniture, and motorcycles. With nationwide coverage through numerous branches and home delivery, they serve over 100,000 customers with a certified e-commerce platform and reliable after-sales support. Backed by a team of 700+ employees and values like honesty and continuous learning, Electroban is expanding toward 70 stores to bring innovation and quality of life to families across Paraguay | Source: https://www.ransomware.live/id/RWxlY3Ryb2JhbiBTQUVAdGhlZ2VudGxlbWVu

thegentlemen: Shajarpak Securities

Ransomware attack attributed to thegentlemen. | Country: IR | Sector: Financial Services | Website: shajarpaksecurities.com | Infostealer data confirmed. | shajarpaksecurities.com Shajarpak Securities is a trusted SECP-licensed brokerage and part of the Shajarpak Group, empowering clients with secure online trading on the Pakistan Stock Exchange. Their seasoned equity team brings 60+ years of combined experience, delivering timely market insights and best-in-class execution with strict compliance and ethical standards. With a robust Oracle®-based platform, mobile apps, and dedicated support for NRPs and institutional investors, they make intelligent investing accessible anytime, anywhere | Source: https://www.ransomware.live/id/U2hhamFycGFrIFNlY3VyaXRpZXNAdGhlZ2VudGxlbWVu

thegentlemen: Focus Design Partners

Ransomware attack attributed to thegentlemen. | Country: QA | Sector: Business Services | Website: fdpme.com | Infostealer data confirmed. | fdpme.com zoominfo.com/c/focus-design-partners/368873259 Focus Design Partners (fdpme.com) is a Grade-A international firm with nearly 50 years of excellence in architecture, engineering, and project management, delivering iconic projects like Qatar's Al Jannoub Stadium and Lusail Circuit. With offices across 6+ countries, they combine global expertise with strategic partnerships and a people-first culture certified by Great Place To Work®. Their integrated, sustainable design solutions span sports, healthcare, commercial, and infrastructure sectors — all delivered with full accountability and innovation | Source: https://www.ransomware.live/id/Rm9jdXMgRGVzaWduIFBhcnRuZXJzQHRoZWdlbnRsZW1lbg==

thegentlemen: Hillside Lumber

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: hillsidelumber.com | Infostealer data confirmed. | hillsidelumber.com Hillside Lumber is a family-owned full-service building materials supplier established in 1979, based in Westbrook, Maine. The company serves builders, contractors, and DIY enthusiasts throughout Southern Maine with high-quality lumber, saw mill products, kitchen design, and building supplies. With 38 employees, they provide professional service to both construction professionals and homeowners. | Source: https://www.ransomware.live/id/SGlsbHNpZGUgTHVtYmVyQHRoZWdlbnRsZW1lbg==

thegentlemen: DEVCO

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Business Services | Website: devco.pl | Infostealer data confirmed. | devco.pl DEVCO Sp. z o.o. is a Polish real estate company established in 1997, headquartered in Wroclaw at ul. Strzegomska 46-56. The company specializes in renting office and warehouse spaces, notably operating the Wroclawski Park Biznesu (Wroclaw Business Park). Their mission is to create comfortable, inspiring, and business-friendly work environments for tenants. | Source: https://www.ransomware.live/id/REVWQ09AdGhlZ2VudGxlbWVu

thegentlemen: CHX Express

Ransomware attack attributed to thegentlemen. | Country: VE | Sector: Transportation/Logistics | Website: chxpress.com.ve | Infostealer data confirmed. | chxpress.com.ve C.H. Express C.A. is a Venezuelan transportation and logistics company with over 20 years of experience, headquartered in San Diego, Carabobo. The company specializes in national cargo transportation, package delivery services, and light cargo consolidation, covering the entire Venezuelan territory. With a strategic location, modern fleet, and large warehouse facilities, they ensure fast, reliable deliveries and efficient logistics solutions for various industries across the country. | Source: https://www.ransomware.live/id/Q0hYIEV4cHJlc3NAdGhlZ2VudGxlbWVu

thegentlemen: Arizona Professional Painting

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Construction | Website: azpropaint.com | Infostealer data confirmed. | azpropaint.com Arizona Professional Painting is a family-owned and operated commercial and industrial painting contractor established in 1994, based in Phoenix, Arizona. The company specializes in diverse sectors including data centers, healthcare facilities, sports facilities, industrial projects, and tenant improvements across the state. With SBE, WBE, MBE, and DBE certifications, they maintain an exceptional safety record with a .66 EMR rating and zero recordable on-the-job incidents. Their experienced team provides comprehensive interior and exterior painting, industrial coatings, floor coatings, and ongoing facility maintenance services. | Source: https://www.ransomware.live/id/QXJpem9uYSBQcm9mZXNzaW9uYWwgUGFpbnRpbmdAdGhlZ2VudGxlbWVu

thegentlemen: McCarthy

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Construction | Website: mccarthyinc.com | Infostealer data confirmed. | mccarthyinc.com McCarthy, Inc., founded in 1955 and based in Savannah, Georgia, specializes in supplying metal doors and frames, wood doors, builder's hardware, toilet partitions, signage, louvers, and specialty accessories. The company serves diverse industries including healthcare, education, commercial, government, manufacturing, and hospitality sectors across the region. McCarthy provides comprehensive products and services from project inception through completion, focusing on building lasting relationships with project teams to ensure utmost client satisfaction. | Source: https://www.ransomware.live/id/TWNDYXJ0aHlAdGhlZ2VudGxlbWVu

thegentlemen: VeriCon

Ransomware attack attributed to thegentlemen. | Country: NL | Sector: Not Found | Website: vericon.nl | Infostealer data confirmed. | vericon.nl VeriCon is an independent structural engineering consultancy firm based in Veldhoven, Netherlands, founded over 20 years ago by Jos Hoonhout. The company specializes in designing, calculating, and drawing constructions for civil and utility construction projects. VeriCon is active in BIM and industrial building, with particular expertise in prefabricated concrete and steel constructions. The firm distinguishes itself by integrating innovative solutions into structural designs and providing clients with additional information about constructive elements and building materials beyond standard deliverables. | Source: https://www.ransomware.live/id/VmVyaUNvbkB0aGVnZW50bGVtZW4=

thegentlemen: KUPER

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Not Found | Website: kuper.de | Infostealer data confirmed. | kuper.de Heinrich KUPER GmbH is an internationally active medium-sized company headquartered in Rietberg, Germany, with approximately 120–190 employees. The company specializes in developing and manufacturing machines and systems for veneer processing, solid wood working, automated packaging technology, and special-purpose woodworking equipment. As a quality leader in veneer and wood processing technology, KUPER serves customers worldwide with individualized solutions and comprehensive service support. | Source: https://www.ransomware.live/id/S1VQRVJAdGhlZ2VudGxlbWVu

thegentlemen: TDS

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Telecommunication | Website: tdstelecom.com | Infostealer data confirmed. | tdstelecom.com TDS Telecommunications LLC, founded in 1969 and headquartered in Madison, Wisconsin, is a leading U.S. telecommunications provider serving residential and business customers across urban, suburban, and rural communities. The company delivers high-speed fiber-optic internet (up to 8 Gigabit), IP-based TV entertainment, and traditional phone services, alongside business solutions like VoIP, dedicated internet, and data networking. With over 1.1 million connections, TDS is a wholly owned subsidiary of Telephone and Data Systems, Inc. (NYSE: TDS), committed to enhancing communities through reliable, innovative communications technology. | Source: https://www.ransomware.live/id/VERTQHRoZWdlbnRsZW1lbg==

thegentlemen: Misr Chemical Industries

Ransomware attack attributed to thegentlemen. | Country: EG | Sector: Manufacturing | Website: mci.com.eg | Infostealer data confirmed. | mci.com.eg Misr Chemical Industries Co. (MCI), founded in 1959 and headquartered in Alexandria, Egypt, is a publicly listed chemical manufacturer on the Egyptian Exchange (EGX). As the oldest Egyptian producer of liquid caustic soda, chlorine gas, and derivatives, the company specializes in manufacturing chemicals including hydrochloric acid, sodium hydroxide solutions, and compressed hydrogen for domestic and regional markets. MCI serves industrial clients across Egypt and the Middle East, focusing on meeting local demand while exporting surplus production to support regional chemical supply chains. | Source: https://www.ransomware.live/id/TWlzciBDaGVtaWNhbCBJbmR1c3RyaWVzQHRoZWdlbnRsZW1lbg==

thegentlemen: DermaPharm

Ransomware attack attributed to thegentlemen. | Country: DK | Sector: Healthcare | Website: dermapharm.dk | Infostealer data confirmed. | dermapharm.dk DermaPharm A/S is a 100% Danish-owned skincare company founded in 1980, specializing in mild, eco-certified, and allergy-friendly personal care products. Headquartered in Fårup, Denmark, they operate a 10,000 m production facility and serve as both a brand owner (Derma) and a full-service private label manufacturer for third parties The company is a market leader in Nordic suncare and a trusted partner of the Danish Cancer Society | Source: https://www.ransomware.live/id/RGVybWFQaGFybUB0aGVnZW50bGVtZW4=

thegentlemen: Mundo Amtae

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Not Found | Website: mundoamtae.com | Infostealer data confirmed. | mundoamtae.com zoominfo.com/c/mundo-amtae/372405633 Mundo AMTAE (Asociacion Mutual de Trabajadores Estatales) is one of Argentina's top 5 mutual aid organizations, founded in 1987 and headquartered at Lavalle 3155, Buenos Aires. With over 30 years of experience and 100,000 members spread across 20 branches nationwide, the organization provides a broad range of social, health, and financial services to state workers, retirees, and the general public. Its core offerings include medical consultations across all specialties, dental care, clinical analysis, physiotherapy, home medical visits, 24/7 ambulance service, and optical coverage. AMTAE also offers loan programs and financial assistance, with tiered membership plans (Plata, Dorado, Platino) covering varying levels of healthcare and personal accident protection | Source: https://www.ransomware.live/...

thegentlemen: Da Guan Technology

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Technology | Website: daguan-tech.com.tw | Infostealer data confirmed. | daguan-tech.com.tw Da Guan Technology serves as the official distributor of two major brands: Mitsubishi Electric (Japan) and Lifegear (Taiwan) — offering a full range of products including heat recovery ventilators (HRV), bathroom warm-air dryers, ultra-quiet exhaust fans, circulation fans, and fresh-air systems. Their primary sales channels include construction companies, interior designers, plumbing distributors, and premium bathroom retailers | Source: https://www.ransomware.live/id/RGEgR3VhbiBUZWNobm9sb2d5QHRoZWdlbnRsZW1lbg==

thegentlemen: Nrt India

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Business Services | Website: nrtindia.com | Infostealer data confirmed. | nrtindia.com zoominfo.com/c/nrt-india/372321597 NRT India is a premier IIT-JEE and NEET coaching institute headquartered in Lucknow, Uttar Pradesh, India. It was originally founded in 1997 by Shree Indu Shekhar Shukla under the name "NRT," and re-established on August 30–31, 2010 by Sir A.N. Pandey, who previously served as Head of Department of Physics at the same institute. The institute now operates study centers in Lucknow, Barabanki, Dehradun, and Pratapgarh | Source: https://www.ransomware.live/id/TnJ0IEluZGlhQHRoZWdlbnRsZW1lbg==

thegentlemen: Riggotts

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Not Found | Website: riggott.co.uk | Infostealer data confirmed. | riggott.co.uk zoominfo.com/c/riggotts--co-ltd/345701355 Riggotts (Riggott and Company Limited) is one of the UK's leading line marking and surface coating contractors, founded on 2 November 1994 by brothers Nick and Darren Riggott. Headquartered in Tuxford, Newark, Nottinghamshire, the company has grown to operate more than 50 specialist teams working 24/7 across the entire United Kingdom. Estimated annual turnover stands at approximately 8 million | Source: https://www.ransomware.live/id/UmlnZ290dHNAdGhlZ2VudGxlbWVu

thegentlemen: IPE

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Not Found | Website: ipesrl.com | Infostealer data confirmed. | ipesrl.com zoominfo.com/c/ipe-srl/372826031 IPE Technologies S.r.l. is an Italian company and the flagship entity of the IPE Group, specializing in the distribution of sealed lead-acid batteries, battery chargers, shielded cables, and Panasonic electronic components across Italy. Active in the sector since 1986, the company distributes premium brands such as Yuasa and Panasonic, alongside its own proprietary brands Remco and RemcoX. Its client base includes alarm system installers, UPS maintenance companies, specialized retailers, and industrial automation and telecommunications firms | Source: https://www.ransomware.live/id/SVBFQHRoZWdlbnRsZW1lbg==

thegentlemen: Gator Cases

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: gatorcases.com | Infostealer data confirmed. | gatorcases.com zoominfo.com/c/gator-cases/20824928 Gator Cases is a leading American manufacturer of protective cases, bags, stands, and accessories for musicians and audio/visual professionals, founded in 2000 by father-daughter team Jerry Freed and Crystal Morris in Tampa, Florida. Starting with a small lineup of molded plastic guitar cases at the Summer NAMM show, the company has grown to offer over 1,000 product solutions across categories including pro audio, IT, DJ, percussion, band instruments, and AV equipment. With an annual revenue of approximately 27 million and ~96 employees, Gator operates a major 180,000 sq. ft. manufacturing and distribution facility in Columbia City, Indiana, and backs all products with a Limited Lifetime Warranty | Source: https://www.ransomware.live/id/R2F0b3IgQ2FzZXNAdGhlZ2VudGxlbWVu

thegentlemen: DATAMATIC

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Technology | Website: datamatic.it | Infostealer data confirmed. | datamatic.it rocketreach.co/datamatic-spa-profile_b54e4ebcf94229d2 Datamatic S.p.A. is an Italian company headquartered in Milan, operating in the consumer electronics sector with an estimated revenue of $50–100 million and a workforce of 251–500 employees. The company functions as a major distributor and sales organization, supported by over 200 staff dedicated to sales, logistics, and partner support for its network of distributors. Its published company profile positions it as a reliable and dynamic organization focused on delivering strong commercial and operational support to trade partners across Italy and beyond | Source: https://www.ransomware.live/id/REFUQU1BVElDQHRoZWdlbnRsZW1lbg==

thegentlemen: C2O Architects

Ransomware attack attributed to thegentlemen. | Country: BE | Sector: Business Services | Website: c2o-architects.be | Infostealer data confirmed. | c2o-architects.be zoominfo.com/c/c2o-architects/451291685 C2O Architects (C2O-Architects bv) is a Belgian architectural and urban planning firm founded on June 29, 2000, headquartered at Nieuwstraat 26, Asse, Flemish Brabant, Belgium. The studio is led by Marnik Dehaen, who also serves as Chairman of the Flemish Council of the Order of Architects, and co-owned by Erna Polspoel. The firm works across a wide range — from small private renovations and residential expansions to large-scale public projects — with a multidisciplinary team that adds value through expertise in architecture, urban design, and spatial planning. A notable project includes the award-winning Asse Landform complex (2014), a regional fire station and youth center designed in collaboration with ORG Permanent Modernity | Source: https://www.ransomware.live/id/QzJPIEFyY2hpd...

thegentlemen: FMS

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Not Found | Website: fmsinc.com | Infostealer data confirmed. | fmsinc.com zoominfo.com/c/fms-inc/14729979 FMS, Inc. is a privately held American software company founded in 1986 by Luke Chung (Harvard graduate), headquartered in Vienna, Virginia, near Washington DC. The company is the world's leading developer of tools for Microsoft Access, and a top vendor for SQL Server, Visual Studio .NET, and Visual Basic communities, with tens of thousands of customers across 100+ countries, including 90 of the Fortune 100 and every US federal government department. FMS is a Microsoft Gold Certified Partner, has won over 40 industry awards, and is recognized as one of the SD Times Top 100 most innovative software firms. It also offers custom software development consulting and its own Sentinel Visualizer link analysis product, used by intelligence and law enforcement agencies | Source: https://www.ransomware.live/id/Rk1TQHRoZWd...

thegentlemen: Clark Fixture Technologies

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: clarkfixtures.com | Infostealer data confirmed. | clarkfixtures.com zoominfo.com/c/clark-fixture-technologies-inc/31954083 Clark Fixture Technologies, Inc. is a privately held American manufacturer founded in 1978, headquartered at Bowling Green, Ohio, with an estimated annual revenue of $42.9 million and a staff of 51–200 employees. The company designs, manufactures, and inspects quality check fixtures and gages for bent tube, hose, wire, and weld products, serving industries including automotive, aerospace, space, medical, and agriculture. Clark Fixtures operates globally with facilities in the US, Mexico (Saltillo), and India (Bangalore), servicing clients across 11 countries, including a prestigious roster of aerospace and space clients who rely on its orbital weld tooling for propulsion and life support assemblies. It also offers CMM inspection services and advanced automated robotic cel...

thegentlemen: Manhattan Fire Safety Corp

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: mfsnyc.com | Infostealer data confirmed. | mfsnyc.com rocketreach.co/mfs-nyc-profile_b4779b17fc5cb39e Manhattan Fire & Security (MFS) is a licensed fire alarm and security services firm based in New York City, with over 15 years of experience serving commercial and industrial clients across NYC and surrounding areas. The company employs NICET-certified engineers and licensed fire alarm contractors who design, install, inspect, and maintain fire alarm and ARC (Auxiliary Radio Coverage) systems fully in compliance with FDNY requirements. Beyond fire safety, MFS also provides IT communication systems, structured cabling, and security solutions, offering 24/7 monitoring and maintenance to eliminate downtime and ensure continuous operational safety for businesse | Source: https://www.ransomware.live/id/TWFuaGF0dGFuIEZpcmUgU2FmZXR5IENvcnBAdGhlZ2VudGxlbWVu

thegentlemen: Worralls

Ransomware attack attributed to thegentlemen. | Country: NZ | Sector: Not Found | Website: worrall.co.nz | Infostealer data confirmed. | worrall.co.nz W.H. Worrall & Co. Limited (Worralls) is New Zealand's leading distributor of world-class cycling and sporting brands, with roots going back to the early 1900s when it was founded by W.H. Worrall in Auckland. Today, the company is headquartered at 12 Hugo Johnston Drive, Penrose, Auckland, and remains a family-linked business formally registered since May 27, 1988. Worralls distributes an impressive portfolio of premium brands including Bell Helmets, Campagnolo, SRAM, Continental, Rock Shox, Cane Creek, Blackburn, San Marco, and Tacx, catering to both professional cyclists and recreational riders. The company has historically been a pioneer in the NZ cycling market — it was among the first to have Japanese manufacturers produce bicycles to English specifications | Source: https://www.ransomware.live/id/V29ycmFsbHNAdGhlZ2VudGxlbWVu

thegentlemen: Marutake

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Agriculture and Food Production | Website: kk-marutake.co.jp | Infostealer data confirmed. | kk-marutake.co.jp zoominfo.com/c/marutake/561552308 Marutake Co., Ltd. is a comprehensive pharmaceutical and medical wholesale company founded on June 15, 1925, and headquartered in Niigata City, Japan, with a 100-year history of connecting manufacturers to healthcare providers across the region. The company distributes prescription pharmaceuticals, medical devices, clinical diagnostic reagents, hygiene materials, nursing care products, and healthcare IT systems to hospitals, clinics, and pharmacies, primarily across Niigata, Yamagata, Miyagi, Akita, Tokyo, and Gunma prefectures. With a workforce of 477 employees and capital of ¥100 million, Marutake positions itself as a "supporter of the medical frontline," ensuring stable supply of essential medical commodities to local communities | Press: https://rocket-boys.co.jp/securi...

thegentlemen: East

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Not Found | Website: east-inc.jp | Infostealer data confirmed. | east-inc.jp zoominfo.com/c/east/5000054099 East Inc. is a Japanese company headquartered in Tokyo that provides comprehensive outsourcing services for commercial facilities — shopping malls, outlet parks, and office complexes — covering everything from day-to-day operations to system development, website management, and information services. The company has an impressive track record of over 800 commercial facilities nationwide across Japan, with clients including Roppongi Hills, Nihonbashi Takashimaya S.C., Mitsui Outlet Parks, and Ebisu Garden Place. Since 2007, East Inc. has also been supporting Japanese companies expanding into China, offering systems and operational know-how for overseas operations | Press: https://en.east-inc.jp/info/2026/05/0019435/ | Source: https://www.ransomware.live/id/RWFzdEB0aGVnZW50bGVtZW4=

thegentlemen: Millennium Partners

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Financial Services | Website: millenniumptrs.com | Infostealer data confirmed. | millenniumptrs.com zoominfo.com/c/millennium-partners-inc/483051874 Millennium Partners is a premier luxury real estate developer founded in 1991 and headquartered in New York City, with over three decades of transforming urban neighborhoods through landmark mixed-use developments in gateway cities such as New York, Boston, San Francisco, and Washington D.C.. The company has pioneered the luxury branded residential experience by forging first-of-their-kind partnerships with Ritz-Carlton and Four Seasons, and today owns a portfolio worth over $5 billion encompassing 3,200+ condominiums, 10 hotels, 2 million sq ft of office space, and 1 million sq ft of retail. In 2023, Millennium Partners opened Winthrop Center in Boston — the world's largest Passive House office building — setting a new global benchmark for sustainability and human-cente...

thegentlemen: La Kaffa International

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Agriculture and Food Production | Website: lakaffagroup.com | Infostealer data confirmed. | lakaffagroup.com zoominfo.com/c/la-kaffa-international-co-ltd/426003975 La Kaffa International is a publicly listed Taiwanese multinational food and beverage group (Taiwan Stock Exchange, code: 2732), founded in 2004 and headquartered in Zhubei City, Hsinchu County, Taiwan, with over 663 employees and annual revenues around $46 million. The company is best known as the parent brand of Chatime — the world-famous bubble tea chain expanded to 50+ countries across 6 continents, making it the top takeout tea brand in Australia, Southeast Asia, and beyond. Beyond Chatime, La Kaffa manages a multi-brand portfolio of 9+ F&B concepts including ZenQ Dessert, Bake Code Bakery, ChunSun Cake, La Kaffa Cafe, Wagokoro Tonkatsu, and Osaka Ohsho Taiwan, with over 1,100 outlets in China alone | Source: https://www.ransomware.live/id/TGEgS2FmZmE...

thegentlemen: Mediaplex

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Technology | Website: mediaplexcnc.com | Infostealer data confirmed. | mediaplexcnc.com zoominfo.com/c/mediaplex-inc/465166226 Mediaplex sas is a young, dynamic Italian manufacturing company based in Casoria (Naples, Italy), specializing in CNC machining, cutting, and fabrication of plexiglass and plastic materials in general. The company serves clients needing precision plastic components, decorative elements, displays, and custom-made plastic parts produced via CNC routing, laser cutting, and thermoforming. Rated 4.5/5 by customers, Mediaplex is regarded as a reliable plastic fabrication partner in the Campania region of Italy | Source: https://www.ransomware.live/id/TWVkaWFwbGV4QHRoZWdlbnRsZW1lbg==

thegentlemen: The Modern Flour Mill

Ransomware attack attributed to thegentlemen. | Sector: Agriculture and Food Production | Website: modernflourmills.com | Infostealer data confirmed. | modernflourmills.com zoominfo.com/c/the-modern-flour-mills-and-macaroni-factories-co/425333381 Modern Flour Mills & Macaroni Factories Co. (MFM) is a diversified cereal processor founded in 1949 and headquartered in Amman, Jordan, with a workforce of 201–500 employees. The company operates four main production plants — wheat flour milling, pasta, snack foods, and bakery ingredients — and notably opened the first pasta factory in the entire Middle East in 1967. Its products are sold under well-known regional brands: Al-Ghazal (flour & pasta), Suprema/Barakeh (pasta), MFM (specialty flour & baking mixes), and Samar (snacks), with co-packing and private labeling available for export markets | Source: https://www.ransomware.live/id/VGhlIE1vZGVybiBGbG91ciBNaWxsQHRoZWdlbnRsZW1lbg==

thegentlemen: Kasapreko

Ransomware attack attributed to thegentlemen. | Country: GH | Sector: Agriculture and Food Production | Website: kasapreko.com | Infostealer data confirmed. | kasapreko.com zoominfo.com/c/kasapreko-company-ltd/113558803 Kasapreko PLC is Ghana's leading herbal beverage manufacturer, founded in 1989 by Dr. Kwabena Adjei in a garage in Nungua, Accra, and today grown into a multinational company with over 500 employees, 100+ product SKUs, and exports to 16 countries worldwide. The company pioneered the first scientifically formulated herbal-based alcoholic beverage in Ghana — Alomo Bitters — which became its flagship product and was named by CNN Money as one of the top 5 emerging brands in the world in 2013. ISO 22000:2005 certified and a member of the prestigious Ghana Club 100, Kasapreko produces bitters, whisky, gin, liqueur, brandy, wine, soft drinks, and water, with active expansion into East Africa including Kenya | Source: https://www.ransomware.live/id/S2FzYXByZWtvQHRoZWdlbnRsZW1lb...

thegentlemen: Levante Living

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Consumer Services | Website: levanteliving.com | Infostealer data confirmed. | levanteliving.com zoominfo.com/c/levante-living-lp/388951109 Levante Living is a Canadian-owned senior living enterprise founded in 2016 by Michael Petersen and Jim MacDonald, and headquartered in Toronto, Ontario, focused on acquiring, managing, and redeveloping senior housing across North America. The company currently operates 24 retirement residences across Ontario, employs over 600 team members, and manages approximately 1,600 investors with over $175 million in senior living assets. Its service offerings span the full care spectrum — independent living, assisted living, memory care, respite care, and long-term care — guided by the values of dignity, compassion, integrity, and excellence | Source: https://www.ransomware.live/id/TGV2YW50ZSBMaXZpbmdAdGhlZ2VudGxlbWVu

thegentlemen: Ontario Physiotherapy Association

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Healthcare | Website: opa.on.ca | Infostealer data confirmed. | opa.on.ca zoominfo.com/c/ontario-physiotherapy-association/130548231 The Ontario Physiotherapy Association (OPA) is a non-profit, physiotherapist-led professional association representing over 5,500 physiotherapists, physiotherapist assistants (PTAs), and students across Ontario, Canada. Its core mission is to provide leadership, advocacy, professional development, and career support to ensure accessible, high-quality physiotherapy services throughout the province. Founded over 60 years ago, OPA has a well-documented history of advocacy wins — from expanding PT scopes of practice to supporting virtual care access and removing referral requirements from physicians | Source: https://www.ransomware.live/id/T250YXJpbyBQaHlzaW90aGVyYXB5IEFzc29jaWF0aW9uQHRoZWdlbnRsZW1lbg==

thegentlemen: Farmers Association of Iceland

Ransomware attack attributed to thegentlemen. | Country: IS | Sector: Agriculture and Food Production | Website: bondi.is | Infostealer data confirmed. | bondi.is Farmers Association of Iceland, is Iceland's primary agricultural interest organization representing approximately 3,000 people employed in farming and agriculture-related jobs across the country. The association acts as the official advocate for Icelandic farmers in public forums, protecting their interests in matters of policy, economics, and sustainability, while also developing climate action roadmaps for sustainable farm management. Headquartered in Borgartún 25 in Reykjavík, BÍ publishes agricultural statistics, supports farm productivity improvement, and bridges the gap between society and food producers | Source: https://www.ransomware.live/id/RmFybWVycyBBc3NvY2lhdGlvbiBvZiBJY2VsYW5kQHRoZWdlbnRsZW1lbg==

thegentlemen: Media Consulting

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Business Services | Website: mconweb.it | Infostealer data confirmed. | mconweb.it zoominfo.com/c/media-consulting-srl/372633129 Media Consulting is an Italian web agency based in Cesena that designs and develops custom responsive websites. They offer a full range of digital services including Social Media Marketing, Web Marketing (Google Ads, Email Marketing, Analytics), and graphic design. The agency also provides web marketing training for teams and assists businesses in accessing public funding grants | Source: https://www.ransomware.live/id/TWVkaWEgQ29uc3VsdGluZ0B0aGVnZW50bGVtZW4=

thegentlemen: Keretapi Tanah

Ransomware attack attributed to thegentlemen. | Country: MY | Sector: Transportation/Logistics | Website: ktmb.com.my | Infostealer data confirmed. | ktmb.com.my zoominfo.com/c/keretapi-tanah-melayu-berhad/21365008 KTMB (Keretapi Tanah Melayu Berhad) is Malaysia's largest and oldest railway company, with a rail network spanning 1,699 km across Peninsular Malaysia, extending into Singapore and Thailand. It operates multiple services including KTM Komuter (urban commuter trains since 1995), ETS electric intercity trains, and diesel-powered KTM Intercity trains. The company was privatized in 1992 and today offers online ticketing via its website and mobile app, with a QR-code boarding system | Source: https://www.ransomware.live/id/S2VyZXRhcGkgVGFuYWhAdGhlZ2VudGxlbWVu

thegentlemen: Triquim

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Manufacturing | Website: triquim.com.ar | Infostealer data confirmed. | triquim.com.ar zoominfo.com/c/triquim-sa/430429498 TRIQUIM S.A. is an Argentine pharmaceutical manufacturer founded in 1980 and headquartered in Tortuguitas, Buenos Aires, that has dedicated over 40 years to the synthesis and supply of Active Pharmaceutical Ingredients (APIs) for human and veterinary use. The company operates as a CMO/CDMO partner, offering custom API development, contract manufacturing, regulatory services, containment, and analytical services to pharma clients worldwide. TRIQUIM holds certifications from Brazil's ANVISA and Mexico's COFEPRIS, and supplies clients across North America, Europe, and emerging markets with a portfolio of 16 pharmaceutical products including Benfotiamine, Bosentan, and Clonixinal | Source: https://www.ransomware.live/id/VHJpcXVpbUB0aGVnZW50bGVtZW4=

thegentlemen: Engineered Advantage

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: eapsc.net | Infostealer data confirmed. | eapsc.net zoominfo.com/c/engineered-advantage/1292942990 Engineered Advantage, PSC (EA) is a multidisciplinary architecture and engineering (A/E) firm founded in 2011 and headquartered in San Juan, Puerto Rico, serving both public and private sector clients. The company's expertise spans architecture, civil and structural engineering, forensic engineering, water resources, field inspections, damage assessments, and construction management. EA operates across Puerto Rico, Florida, and the U.S. Virgin Islands, and notably provided post-hurricane recovery engineering services following Hurricanes Irma and Maria in St. Thomas, St. Croix, and St. Maarten | Source: https://www.ransomware.live/id/RW5naW5lZXJlZCBBZHZhbnRhZ2VAdGhlZ2VudGxlbWVu

thegentlemen: Arcelik

Ransomware attack attributed to thegentlemen. | Country: TR | Sector: Manufacturing | Website: www.zoominfo.com | https://www.zoominfo.com/c/arelik-global/462472631 Stock Symbol ARCLK Revenue $11.8 Billion Arcelik Global is a Turkish multinational household appliances manufacturer headquartered in Istanbul, Turkey. Founded in 1955 as a subsidiary of Koc Holding, the company has grown into a worldwide producer and marketer of consumer durables and consumer electronics. The company operates 46 production facilities across 14 countries. With approximately 55,000 employees globally, Arcelik maintains subsidiaries in 58 countries and provides goods and services in over 145 countries. 22 brands including Arcelik, Beko, Grundig, Blomberg, Arctic, Defy, Dawlance, Hotpoint, Indesit, Leisure, Singer, Voltas Beko, and ElektraBregenz.Confluence: 7,736 spaces, 16,371+ pages, 10,313+ attachments, with full technical documentation, internal rules, marketing, engineering specs, R&D results, quality ma...

thegentlemen: Kınık Gross

Ransomware attack attributed to thegentlemen. | Country: TR | Sector: Business Services | Website: kinikgross.com | Infostealer data confirmed. | kinikgross.com Kınık Gross Toptan Market is the first and only local wholesale market in the Thrace (Trakya) region of Turkey, located in Çorlu. It offers a wide range of products including fresh produce, meat, deli, legumes, cleaning supplies, and personal care items — all at competitive wholesale prices | Source: https://www.ransomware.live/id/S8SxbsSxayBHcm9zc0B0aGVnZW50bGVtZW4=

thegentlemen: Diviso Grupo Financiero

Ransomware attack attributed to thegentlemen. | Country: PE | Sector: Financial Services | Website: diviso.pe | Infostealer data confirmed. | diviso.pe zoominfo.com/c/diviso-grupo-financiero-sa/372139811 Diviso Grupo Financiero S.A. is a Lima-based financial holding company founded in 2003 (formerly NCF Inversiones SA, rebranded in November 2013). With around 1,000–5,000 employees and led by CEO José Romero Tapia, it offers a comprehensive portfolio of capital market services through its two main subsidiaries — DIVISO Fondos (mutual and investment funds) and DIVISO Bolsa (stock brokerage). The group holds strategic stakes in major regional exchanges, including the Lima Stock Exchange (BVL), CAVALI, and the Chilean Products Exchange. It is publicly traded on the Lima Stock Exchange under ticker DIVIC1 with a market cap of ~313 million PEN | Source: https://www.ransomware.live/id/RGl2aXNvIEdydXBvIEZpbmFuY2llcm9AdGhlZ2VudGxlbWVu

thegentlemen: Fabritius

Ransomware attack attributed to thegentlemen. | Country: BE | Sector: Manufacturing | Website: fabritius.be | Infostealer data confirmed. | fabritius.be ETS Fabritius SPRL is a Belgian family-owned company founded in 1976, with roots going back to 1945. For over 50 years, it has manufactured and sold temperature measurement equipment — including thermocouples, resistance thermometers, converters, regulators, and connectors. The business has been passed down through three generations of the Fabritius family, combining deep product expertise with a commitment to quality and flexible customer service | Source: https://www.ransomware.live/id/RmFicml0aXVzQHRoZWdlbnRsZW1lbg==

thegentlemen: Forsheda Stlverktyg

Ransomware attack attributed to thegentlemen. | Country: SE | Sector: Manufacturing | Website: stalverktyg.com | Infostealer data confirmed. | stalverktyg.com zoominfo.com/c/forsheda-stlverktyg-ab/345814836 Forsheda Stalverktyg AB is a Swedish industrial company founded in 1961 by Sigfrid Johansson, based in Forsheda, Sweden. For over 60 years, it has developed, manufactured, and serviced high-quality injection molding tools for the plastics, rubber, and metal industries. The company manages the full tool lifecycle — from product idea and manufacturing to repair and modification — and is certified to ISO 9001:2015 and ISO 14001:2015. It employs 11–50 people and collaborates with international suppliers in Asia | Source: https://www.ransomware.live/id/Rm9yc2hlZGEgU3RsdmVya3R5Z0B0aGVnZW50bGVtZW4=

thegentlemen: Magisterial Service

Ransomware attack attributed to thegentlemen. | Country: PG | Sector: Business Services | Website: magisterialservices.gov.pg | Infostealer data confirmed. | magisterialservices.gov.pg The Magisterial Service of Papua New Guinea (MS) is the administrative arm of the country's District Court system, established in 1975 under Section 173(1) of the PNG Constitution. It oversees the effective and efficient administration of 63 District Court establishments and over 400 gazetted court-holding locations across the country. Headquartered in Port Moresby, the service is led by the Chief Magistrate and operates under the Ministry of Justice and Attorney General. Its budget for 2025 was projected at K109 million, reflecting the government's commitment to improving access to justice nationwide | Source: https://www.ransomware.live/id/TWFnaXN0ZXJpYWwgU2VydmljZUB0aGVnZW50bGVtZW4=

thegentlemen: IT Management

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Technology | Website: itmanagement.co.th | Infostealer data confirmed. | itmanagement.co.th zoominfo.com/c/it-management-co-ltd/446178193 IT Management Co., Ltd. is a small local IT company based in Bangkok, Thailand, located at 562 Dindaeng Road, Din Daeng district. The company specializes in network intelligence and IT infrastructure solutions, assembling teams capable of handling a full range of networking functions. It appears to be a boutique-sized local business with a modest online presence | Source: https://www.ransomware.live/id/SVQgTWFuYWdlbWVudEB0aGVnZW50bGVtZW4=

thegentlemen: MIMS

Ransomware attack attributed to thegentlemen. | Country: SG | Sector: Business Services | Website: mims.com | Infostealer data confirmed. | mims.com zoominfo.com/c/mims-pte-ltd/354424916 MIMS is a pharmaceutical prescribing reference guide first published in the United Kingdom in 1959 by Haymarket Media Group. The platform provides comprehensive drug information — including dosages, interactions, clinical guidelines, and prescribing data — for healthcare professionals across the globe. MIMS operates internationally across Asia, Australia, and beyond, with dedicated editions for countries including Malaysia, India, Indonesia, Japan, Singapore, and many others. Its mobile app and online database are used daily by doctors and pharmacists for drug lookups, medical news, and CME articles | Source: https://www.ransomware.live/id/TUlNU0B0aGVnZW50bGVtZW4=

thegentlemen: Colegio Notre Dame Campinas

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Education | Website: notredamecampinas.com.br | Infostealer data confirmed. | notredamecampinas.com.br zoominfo.com/c/colégio-notre-dame-campinas/460150468 Colégio Notre Dame is a private Catholic school founded in 1961 in Campinas, São Paulo, Brazil, by the Congregation of Holy Cross. The school offers education from kindergarten through secondary school (Ensino Infantil to Ensino Médio), as well as international curriculum programs. With over 12,000 Instagram followers and 51–200 employees, it is one of the most recognized private schools in the Campinas region. Its motto — "educating minds and hearts" — reflects its mission to combine academic excellence with Catholic values | Source: https://www.ransomware.live/id/Q29sZWdpbyBOb3RyZSBEYW1lIENhbXBpbmFzQHRoZWdlbnRsZW1lbg==

thegentlemen: Beaconhouse School System

Ransomware attack attributed to thegentlemen. | Country: PK | Sector: Education | Website: beaconhouse.net | Infostealer data confirmed. | beaconhouse.net zoominfo.com/c/beaconhouse-school-system/351460008 Beaconhouse was founded in November 1975 in Lahore, Pakistan, as the modest Les Anges Montessori Academy with just 19 toddlers. Today it has grown into a global network with over 380,000 students across 8 countries, including Pakistan, the UK, Malaysia, the Philippines, UAE, Oman, Belgium, and Thailand. The group employs more than 18,000 staff from around the world and encompasses everything from early childhood education to university-level institutions such as Beaconhouse National University and Concordia Colleges. In 1996, it became the first private school network in the world to receive financing from the World Bank's International Finance Corporation | Source: https://www.ransomware.live/id/QmVhY29uaG91c2UgU2Nob29sIFN5c3RlbUB0aGVnZW50bGVtZW4=

thegentlemen: ACFA Regionale de Calgary

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Not Found | Website: acfa.ab.ca | Infostealer data confirmed. | acfa.ab.ca zoominfo.com/c/acfa-régionale-de-calgary/354494275 The ACFA (French Canadian Association of Alberta) was founded in 1926 and serves as the official political spokesperson for all French-speaking people in Alberta. Its core mission is to protect francophone linguistic rights, advance French-language education, and strengthen the cultural vitality of Alberta's Francophone communities across 13+ regional branches. The non-profit is headquartered in Edmonton and employs between 11–50 people. It is currently approaching its 100th anniversary, with the board actively planning centennial celebrations | Source: https://www.ransomware.live/id/QUNGQSBSZWdpb25hbGUgZGUgQ2FsZ2FyeUB0aGVnZW50bGVtZW4=

thegentlemen: Heinrich Kopp

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Manufacturing | Website: kopp.eu | Infostealer data confirmed. | kopp.eu https://www.zoominfo.com/c/heinrich-kopp-gmbh/372789517 Heinrich Kopp GmbH, headquartered in Kahl am Main, Germany, has been developing and manufacturing electrical installation products "Made in Germany" since 1927. The company offers a catalog of over 7,000 products — from simple plugs and switches to Smart Home and wireless radio systems. Kopp is one of the leading electrical installation brands in German-speaking countries, serving both professional electricians and DIY customers. In 2020, the company launched a new "Energy & Home Automation" division, expanding into the smart home market | Source: https://www.ransomware.live/id/SGVpbnJpY2ggS29wcEB0aGVnZW50bGVtZW4=

thegentlemen: Nostrum

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Not Found | Website: nostrum.co.jp | Infostealer data confirmed. | nostrum.co.jp Nostrum Corporation, based in Japan, was founded in 1991 and specializes in smartphone app development, web system development, and website construction. The company is represented by Ryoichi Jono and is registered on the J-GoodTech platform as a verified Japanese technology business. One of their flagship self-developed products is a job aptitude test preparation tool — a simulation platform replicating real SPI, TG-WEB, and similar employment exam interfaces used by major Japanese companies | Source: https://www.ransomware.live/id/Tm9zdHJ1bUB0aGVnZW50bGVtZW4=

thegentlemen: EEC Group

Ransomware attack attributed to thegentlemen. | Country: EG | Sector: Business Services | Website: eecegypt.com | Infostealer data confirmed. | eecegypt.com zoominfo.com/c/eec-group/372746808 EEC Group (Engineering Enterprises for Civil & Steel Constructions S.A.E.) is an Egyptian engineering and construction conglomerate headquartered at EEC Tower, Sheraton Heliopolis, Cairo. Founded in 1977 as a construction company, it expanded into steel structure manufacturing in 1983 and became a telecom infrastructure turnkey contractor from 1996 onwards | Source: https://www.ransomware.live/id/RUVDIEdyb3VwQHRoZWdlbnRsZW1lbg==

thegentlemen: Coralina

Ransomware attack attributed to thegentlemen. | Country: CO | Sector: Public Sector | Website: coralina.gov.co | Infostealer data confirmed. | coralina.gov.co zoominfo.com/c/coralina/425697881 CORALINA (Corporación para el Desarrollo Sostenible del Archipiélago de San Andrés, Providencia y Santa Catalina) is the official Colombian government environmental authority responsible for managing and protecting the natural resources of the San Andrés, Providencia, and Santa Catalina archipelago in the Caribbean. It was created under Article 37 of Law 99 of December 22, 1993 and operates as a public entity with administrative and financial autonomy, its own assets, and legal status | Source: https://www.ransomware.live/id/Q29yYWxpbmFAdGhlZ2VudGxlbWVu

thegentlemen: Lawson Software

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Business Services | Website: lawson.co.th | Infostealer data confirmed. | lawson.co.th zoominfo.com/c/lawson-software-co-ltd/454540883 Lawson Software (Thailand) Co., Ltd. is a Bangkok-based IT consulting firm specializing in ERP (Enterprise Resource Planning) implementation and business software solutions, founded in 1999. The company is headquartered at Gypsum Metropolitan Tower, Si Ayutthaya Road, Ratchathewi, Bangkok, and has a team of 11–50 employees | Source: https://www.ransomware.live/id/TGF3c29uIFNvZnR3YXJlQHRoZWdlbnRsZW1lbg==

thegentlemen: Champion Homes

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Construction | Website: championhomes.com.au | Infostealer data confirmed. | championhomes.com.au zoominfo.com/c/champion-homes-pty-ltd/345413802 Established Sydney home builder since 1998 — Champion Homes is a residential building company operating in Greater Sydney and the Illawarra region of NSW, with thousands of homes built over more than 25 years. Specializes in duplexes, knockdown rebuilds & house/land packages — Their core offerings include duplex construction, knock-down rebuilds, house & land packages, narrow lot designs, and custom single or double-storey homes with 3–5 bedrooms.Quality-first approach with guarantees — Every completed home comes with 9 Champion Certificates & Guarantees, and the company partners exclusively with leading Australian brands as standard inclusions for maximum value. | Source: https://www.ransomware.live/id/Q2hhbXBpb24gSG9tZXNAdGhlZ2VudGxlbWVu

thegentlemen: Euro Creations

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Consumer Services | Website: eurocreations.co.th | Infostealer data confirmed. | eurocreations.co.th Luxury furniture retailer founded in 1996, Bangkok — Euro Creations is a Thailand-based public company (SET: EURO) specializing in importing and distributing European luxury furniture, lighting, and home accessories, headquartered on Sukhumvit Road, Bangkok. Three flagship stores in prime Bangkok locations — The company operates showrooms at CDC, Siam Paragon, and Thonglor, offering curated collections from world-renowned European brands across living room, bedroom, bathroom, kitchen, outdoor, and wardrobe categories. | Source: https://www.ransomware.live/id/RXVybyBDcmVhdGlvbnNAdGhlZ2VudGxlbWVu

thegentlemen: SmartSystems

Ransomware attack attributed to thegentlemen. | Country: IE | Sector: Technology | Website: iesmartsystems.com | Infostealer data confirmed. | iesmartsystems.com zoominfo.com/c/smart-systems/139592895 Technology integrator since 2000 — Founded in Houston, Texas by Gary and Doug Colvin, i.e. Smart Systems has over 25 years of experience delivering design-build technology solutions for commercial clients.Core services: A/V, Cabling & Security — The company specializes in audio/video systems, structured cabling (fiber optic, voice, network), security systems (video surveillance, access control), wireless networks, and video conferencing solutions.Strong client loyalty — More than 90% of their business comes from repeat customers, ranging from small municipalities to large publicly-traded corporations; they serve universities, oil & gas campuses, banks, and more across Texas.Award-winning company — i.e. Smart Systems is a four-time Houston Business Journal Fast Tech 50 award recipient, wit...

thegentlemen: Uniview Technologies

Ransomware attack attributed to thegentlemen. | Country: CN | Sector: Technology | Website: www.uniview.com | www.uniview.com https://www.zoominfo.com/c/uniview-technologies-co-ltd/88113211 Uniview Technologies Co Ltd is the third-largest video surveillance manufacturer in China and fourth-largest globally, having achieved approximately 13-fold revenue growth since its founding in 2011. Differentiated by its core networking expertise, Uniview approaches the CCTV and video surveillance market with a technology-forward strategy that sets it apart from traditional competitors. The company prioritizes continuous research and development to maintain competitive advantage in a market where technological capabilities are superseded every three years, enabling Uniview to deliver professional, reliable, and cutting-edge surveillance products and services designed to build safer communities worldwide. With operations spanning 145 countries and regions. DATA SUMMARY - 2,992,978 files, 4.3 TB... |...

thegentlemen: The Marton Agency

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: martonagency.com | Infostealer data confirmed. | martonagency.com The Marton Agency, Inc. is a New York-based international theatre rights agency founded in 1953 by Elisabeth Marton, currently run by her niece Tonda Marton since 1992, and headquartered at 307 West 82nd Street, Manhattan. The agency handles foreign-language rights for American plays and musicals, helping theaters and producers worldwide acquire production rights to US theatrical works. It operates through a global network of associate agents in each country and serves both overseas producers and foreign literary agents as a full-service rights licensing agency | Source: https://www.ransomware.live/id/VGhlIE1hcnRvbiBBZ2VuY3lAdGhlZ2VudGxlbWVu

thegentlemen: Philip Lee

Ransomware attack attributed to thegentlemen. | Country: IE | Sector: Business Services | Website: philiplee.ie | Infostealer data confirmed. | philiplee.ie zoominfo.com/c/philip-lee/429614246 Philip Lee LLP is one of Ireland's leading full-service corporate and commercial law firms, founded in 1993 by Philip Lee as a sole practitioner and grown to a staff of over 200 professionals. The firm has offices in Dublin, Cork, London, and New York, and is the sole Irish member of Multilaw — a global network of 10,000+ lawyers across 100 countries. It is recognized as a top-tier practice in areas including corporate & M&A, data protection (acting as sole legal adviser to the Irish Data Protection Commission), construction, energy, IP, fintech, and blockchain | Source: https://www.ransomware.live/id/UGhpbGlwIExlZUB0aGVnZW50bGVtZW4=

thegentlemen: Jean Cultural

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Consumer Services | Website: jeancard.com | Infostealer data confirmed. | jeancard.com Jean Cultural & Creative Co., Ltd. is a Taiwanese stationery, greeting card, and gift company founded in 1976, with nearly 50 years of experience in the international gifts and stationery industry. The company specializes in original-design handmade greeting cards, stickers, gift wrap, and creative lifestyle products, blending traditional and modern craftsmanship with designs inspired by everyday life and nature. It operates globally with products distributed in over 80 countries and maintains an online shop at shop.jeancard.com. | Source: https://www.ransomware.live/id/SmVhbiBDdWx0dXJhbEB0aGVnZW50bGVtZW4=

thegentlemen: Suma Sklep

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Consumer Services | Website: suma24.pl | Infostealer data confirmed. | Suma24.pl is a Polish B2B online store specializing in professional cleaning products, catering equipment, and hygiene systems for the HoReCa (Hotel, Restaurant, Catering) and food industry sectors. It is operated by Suma Service, a family-owned company founded in 1995 and headquartered in Koszalin, Poland. The store offers 24/7 online ordering with payment via bank transfer, BLIK, and online transfers, and provides personalized offers, technical consulting, and long-term partnership programs | Source: https://www.ransomware.live/id/U3VtYSBTa2xlcEB0aGVnZW50bGVtZW4=

thegentlemen: Anderlues

Ransomware attack attributed to thegentlemen. | Country: BE | Sector: Manufacturing | Website: anderlues.be | Infostealer data confirmed. | Anderlues.be is the official website of the municipality of Anderlues, a small town in the province of Hainaut, Wallonia, Belgium, with a population of approximately 12,000 residents and an area of 17 km². The site serves as the main digital portal for local government services, including an e-counter (E-Guichet) for requesting official documents online, news and announcements, cultural events, and public infrastructure services. The municipality is governed by a local council and offers residents services such as recycling centres, social assistance, energy subsidies, and cultural programmes through its community centre "La Bourlette" | Press: https://www.dhnet.be/regions/charleroi/2026/04/09/ladministration-communale-danderlues-subit-une-cyberattaque-de-grande-ampleur-les-services-fermes-pour-une-duree-inconnue-MBTDZSJTLJB7TIM2SXAWOQ4OAQ/ | Sourc...

thegentlemen: Teleos Systems

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Technology | Website: teleosvet.co.uk | Infostealer data confirmed. | teleosvet.co.uk Teleos Systems Limited is a UK-based software company founded on 14 November 1997, headquartered in St. Neots, Cambridgeshire, and is the largest independent supplier of Veterinary Practice Management Systems (VPMS) in the UK and Ireland. The company has been developing and supporting its flagship veterinary management software for over 20 years, serving small independent practices as well as large multi-site veterinary groups. | Source: https://www.ransomware.live/id/VGVsZW9zIFN5c3RlbXNAdGhlZ2VudGxlbWVu

thegentlemen: Bmtp

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Transportation/Logistics | Website: bmtp.co.th | Infostealer data confirmed. | bmtp.co.th zoominfo.com/c/bmtp/471078846 BMTP (BMT Pacific Ltd.) is a private container terminal and full-service logistics provider located in Bangkok, Thailand, operating along the Chao Phraya River. The company offers comprehensive import/export cargo handling — including FCL/LCL containers, reefer cargo (225 plugs), oversized and dangerous goods — as well as warehousing, fumigation, and on-site paperless customs clearance. BMTP is ISO 9001:2015 certified, has over 30 years of experience, operates 24/7, and is connected via barge to Laem Chabang deep-sea port | Source: https://www.ransomware.live/id/Qm10cEB0aGVnZW50bGVtZW4=

thegentlemen: Laboratório Santa Luzia

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Healthcare | Website: sluzia.com.br | Infostealer data confirmed. | sluzia.com.br zoominfo.com/c/laboratório-médico-santa-luzia/430822893 Laboratório Santa Luzia is a leading clinical analysis laboratory based in Florianópolis, Brazil, with over 45 years of experience in diagnostic and preventive medicine. It offers more than 2,000 types of medical tests, vaccination services, home collection, and pediatric care across nearly 30 units in the Greater Florianópolis area. The lab also provides corporate health plans, pre-employment exams, and partnerships with clinics, hospitals, and other labs. | Source: https://www.ransomware.live/id/TGFib3JhdMOzcmlvIFNhbnRhIEx1emlhQHRoZWdlbnRsZW1lbg==

thegentlemen: Jumbo Transport

Ransomware attack attributed to thegentlemen. | Country: DK | Sector: Transportation/Logistics | Website: jumbotransport.dk | Infostealer data confirmed. | jumbotransport.dk zoominfo.com/c/jumbo-transport/1161644600 Jumbo Transport A/S is a privately-owned Danish freight forwarding and logistics company founded in 1982, headquartered in Brøndby (Copenhagen) with 3 locations in Denmark and own offices in Sweden, Norway, and Finland. The company operates 100+ trucks across Europe daily, 14,000 m² of heated warehouse space, and is an IATA-certified air cargo agent with 38 partners across Europe. Its services cover road, sea, and air freight, warehousing, logistics, ADR dangerous goods, and specialized transport (wine & spirits, furniture, point-of-sale materials) | Source: https://www.ransomware.live/id/SnVtYm8gVHJhbnNwb3J0QHRoZWdlbnRsZW1lbg==

thegentlemen: Greenpharma

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Healthcare | Website: greenpharma.com.br | Infostealer data confirmed. | greenpharma.com.br zoominfo.com/c/greenpharma-química-e-farmacêutica-eireli/558034818 Greenpharma Química & Farmaceutica is a Brazilian pharmaceutical manufacturer founded in 1989 in Anapolis, Goiás, acquired in 1995 by industrial pharmacist Eduardo Gonçalves. The company produces generic and OTC medicines, distributes across all Brazilian states through pharmacy and hospital channels, and operates its own certified pharmaceutical equivalence laboratory (EQFAR-21) accredited by ANVISA | Source: https://www.ransomware.live/id/R3JlZW5waGFybWFAdGhlZ2VudGxlbWVu

thegentlemen: Disk Precision

Ransomware attack attributed to thegentlemen. | Country: SG | Sector: Manufacturing | Website: diskprecision.com | Infostealer data confirmed. | diskprecision.com zoominfo.com/c/disk-precision-group/11452653 Disk Precision Group (DP Group) is a Singapore-headquartered precision engineering company founded in 1986, specializing in CNC Turning and Milling of high-precision metal components. With manufacturing sites across Southeast Asia (Singapore, Malaysia, Thailand), they serve global OEM clients in Oil & Gas, Automotive, Consumer Electronics, and Aerospace sectors | Source: https://www.ransomware.live/id/RGlzayBQcmVjaXNpb25AdGhlZ2VudGxlbWVu

thegentlemen: Marchesi di Barolo

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Agriculture and Food Production | Website: marchesibarolo.com | Infostealer data confirmed. | marchesibarolo.com zoominfo.com/c/marchesi-di-barolo/372735437 English: Marchesi di Barolo is one of Piedmont's most prestigious wine estates, with roots dating back to the early 19th century, when Marchesa Juliette Colbert Falletti pioneered the production of dry, structured Barolo — earning it the title "Wine of Kings, King of Wines". In 1929, local winemaker Pietro Abbona acquired the historic cellars, and the Abbona family has been leading the estate for six generations ever since | Source: https://www.ransomware.live/id/TWFyY2hlc2kgZGkgQmFyb2xvQHRoZWdlbnRsZW1lbg==

thegentlemen: El Ordeno

Ransomware attack attributed to thegentlemen. | Country: EC | Sector: Agriculture and Food Production | Website: elordeno.com | Infostealer data confirmed. | elordeno.com zoominfo.com/c/el-ordeño/363579816 El Ordeño (Sociedad Industrial Ganadera El Ordeño S.A.) is an Ecuadorian agro-industrial dairy company founded in 2001, headquartered in Quito, Pichincha Province. It operates an inclusive and associative business model that connects over 6,000 small and medium dairy producers across 100+ collection centers in the Ecuadorian highlands and Amazon. In 2019, it became the first certified B Corporation dairy company in Ecuador, Latin America, and the Caribbean | Source: https://www.ransomware.live/id/RWwgT3JkZW5vQHRoZWdlbnRsZW1lbg==

thegentlemen: IC Partners

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Business Services | Website: icpartners.it | Infostealer data confirmed. | icpartners.it rocketreach.co/icadvisory-services-india-pvt-ltd-profile_b5c0f34ff42e08a0 IC&Partners is an Italian management consulting firm founded in 1999, headquartered in Udine and Milan, specializing in internationalization strategies for SMEs and large companies. With 27 subsidiaries across Central & Eastern Europe, Russia, China, South Asia, and the Americas, they provide tax, legal, accounting, financial, and HR support for foreign market entry. | Source: https://www.ransomware.live/id/SUMgUGFydG5lcnNAdGhlZ2VudGxlbWVu

thegentlemen: Intra

Ransomware attack attributed to thegentlemen. | Country: NZ | Sector: Healthcare | Website: intracare.co.nz | Infostealer data confirmed. | intracare.co.nz zoominfo.com/c/intra-ltd/430152179 IntraCare is New Zealand's leading private centre of excellence for advanced image-guided medical diagnostics and interventions, founded in 1990 in Auckland. It specialises in three areas: Interventional Cardiology, Electrophysiology, and Interventional Radiology, with over 30 practising specialists treating more than 2,000 patients per year. The clinic operates from two locations — Allevia Hospital Epsom and Southern Cross Hospital North Shore — and is internationally recognized for pioneering procedures like TAVI, implanting the first device in the Asia-Pacific region in 2008 | Press: https://intracare.co.nz/information-regarding-cyber-incident/ | Source: https://www.ransomware.live/id/SW50cmFAdGhlZ2VudGxlbWVu

thegentlemen: ******.***

Ransomware attack attributed to thegentlemen. | Sector: Manufacturing | Largest manufacturer ranked #* globally, ~ $1.2B revenue (2025), operates in 140+ countries, 60,000+ partners, ships 10M+ ****** annually, invests 12% of revenue in R&D, with factories in **** and ***. | Source: https://www.ransomware.live/id/KioqKioqLioqKkB0aGVnZW50bGVtZW4=

thegentlemen: Caja De Seguro Social

Ransomware attack attributed to thegentlemen. | Country: PA | Sector: Public Sector | Website: www.css.org.pa | www.css.org.pa https://www.zoominfo.com/c/caja-de-seguro-social/455482072 www.css.gob.pa Caja de Seguro Social (CSS), the Panamanian Social Security Fund. The CSS is a public institution responsible for administering and governing the national social security and healthcare system in the Republic of Panama. Manages a network of hospitals and clinics nationwide, serving approximately 84% of Panama's population. 3TB of data, including pension, medical, and investment data. As gentlemen, we offered to pay a fair price for the mistake made, after which all data would be permanently deleted from our servers. The management decided that their influence on public opinion is so strong that the incident will remain unnoticed, so we are forced to publish proof of the hack and put the medical and pension databases containing 80% of Panama's population up for sale as a single package f...

thegentlemen: Hangzhou Industrial

Ransomware attack attributed to thegentlemen. | Country: CN | Sector: Manufacturing | Website: hztrust.com | Infostealer data confirmed. | hztrust.com zoominfo.com/c/hangzhou-industrial--commercial-trust-co-ltd/430077414 Hangzhou Industrial & Commercial Trust (hztrust.com) is a state-owned Chinese financial firm founded in 1986, headquartered in Hangzhou with offices in Shanghai and Beijing. It operates as a joint venture with Morgan Stanley, which holds a 19.9% equity stake (the legal maximum for foreign banks in China). The firm specializes in alternative asset management — private equity, separate accounts, and joint ventures — and as of 2014 managed over $4.8 billion AUM. Services include equity investment, M&A, asset restructuring, corporate finance, and financial advisory | Source: https://www.ransomware.live/id/SGFuZ3pob3UgSW5kdXN0cmlhbEB0aGVnZW50bGVtZW4=

thegentlemen: Verzinkerei Rentrop

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Manufacturing | Website: verzinkerei-rentrop.de | Infostealer data confirmed. | verzinkerei-rentrop.de zoominfo.com/c/verzinkerei-rentrop-gmbh/1103509945 Verzinkerei Rentrop GmbH is a German industrial company founded in 1929 in Plettenberg, NRW, specializing in steel surface treatment — primarily hot-dip galvanizing, electrogalvanizing, and phosphatizing. The company also produces steel products such as protective grids, fencing, sheets, and profiles. After filing for insolvency in 2019, its assets were sold to Verzinkerei | Source: https://www.ransomware.live/id/VmVyemlua2VyZWkgUmVudHJvcEB0aGVnZW50bGVtZW4=

thegentlemen: NSOFT

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Technology | Website: nsoft.in | Infostealer data confirmed. | nsoft.in zoominfo.com/c/nsoft-india-services-pvt-ltd/442822236 Founded in 1996 in Bangalore, NSOFT India Services is a leading utility automation and Smart Metering/AMI specialist, helping electricity, water, and gas utilities maximize revenue and reduce losses. The company serves over 16 million consumers across 11+ utilities in India, handling transactions worth more than ₹10,000 crores annually, with a team of 1,000+ employees. It is certified CMMI Level 5, ISO 9001, ISO 27001, and ISO 20000, founded and led by Dr. Naagaraj Subramanya (IIT/IISc). | Source: https://www.ransomware.live/id/TlNPRlRAdGhlZ2VudGxlbWVu

thegentlemen: BRC Biotechnology

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: brcbiotech.com | Infostealer data confirmed. | brcbiotech.com BRC Biotechnology is a biopharmaceutical contract development and manufacturing company that strictly adheres to GMP standards from China, the USA, and Europe. It holds certifications including EU GMP QP compliance, US FDA FEI registration, and ISO 9001:2015, offering professional risk assessments, customized biomanufacturing solutions, and welcoming regular client audits. | Source: https://www.ransomware.live/id/QlJDIEJpb3RlY2hub2xvZ3lAdGhlZ2VudGxlbWVu

thegentlemen: Double C Farm

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Agriculture and Food Production | Website: doublecfarm.net | Infostealer data confirmed. | doublecfarm.net zoominfo.com/c/double-c-farm-llc/356570449 Double C Farm is a private equestrian facility in Montgomery County, Maryland, near Sugarloaf Mountain, owned and operated by Cridder Halle. It features an Extreme Mountain Trail Obstacle Course with 30+ obstacles (bridges, balance beams, water obstacles, trenches) and offers Ranch Riding clinics, group/private lessons, and schooling shows for all skill levels — approved by the East Coast Ranch Riding Association (ECRRA). | Source: https://www.ransomware.live/id/RG91YmxlIEMgRmFybUB0aGVnZW50bGVtZW4=

thegentlemen: International Maritime Hospita

Ransomware attack attributed to thegentlemen. | Country: GH | Sector: Healthcare | Website: imah.gov.gh | Infostealer data confirmed. | imah.gov.gh zoominfo.com/c/international-maritime-hospital-imah/1339985496 IMaH (International Maritime Hospital) is a government-affiliated, world-class healthcare facility located in Tema, Ghana, operating 24/7 year-round including holidays. It specializes in maritime and general health services, offering a wide range of facilities including operating theatres, maternity wards, an oxygen plant, morgue, and emergency care. The hospital is ranked among the top ten hospitals in Ghana and actively participates in international medical tourism expos | Source: https://www.ransomware.live/id/SW50ZXJuYXRpb25hbCBNYXJpdGltZSBIb3NwaXRhQHRoZWdlbnRsZW1lbg==

thegentlemen: Harlem Stage

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Consumer Services | Website: harlemstage.org | Infostealer data confirmed. | harlemstage.org zoominfo.com/c/harlem-stage/109888723 Founded in 1983, Harlem Stage is a New York-based performing arts organization dedicated to empowering artists of the Global Majority — amplifying stories that have been whispered, silenced, or erased. Operating under the motto "Harlem is our home; the world is our stage," it supports dance, music, theater, film, and visual arts through commissions, festivals, education programs, and global partnerships. | Source: https://www.ransomware.live/id/SGFybGVtIFN0YWdlQHRoZWdlbnRsZW1lbg==

thegentlemen: Cleor

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Consumer Services | Website: cleor.com | Infostealer data confirmed. | cleor.com zoominfo.com/c/cleor/355616744 CLEOR is a historic French jewelry brand with over 20 years of experience, offering jewelry, watches, and accessories for men, women, and children online and in stores across France. They control the full production chain — from raw material sourcing to creative design and assembly — with a focus on quality precious materials (18K gold, diamonds, pearls, gemstones) at fair prices | Source: https://www.ransomware.live/id/Q2xlb3JAdGhlZ2VudGxlbWVu

thegentlemen: Brand Collective

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Business Services | Website: brandcollective.com.au | Infostealer data confirmed. | brandcollective.com.au zoominfo.com/c/brand-collective-pty-ltd/366644163 Brand Collective is Australia's leading house of apparel, footwear, and sports brands. They manage owned and licensed brands across the full product lifecycle — from strategy, design, and development to sales, supply chain, retail operations, e-commerce, and marketing. | Source: https://www.ransomware.live/id/QnJhbmQgQ29sbGVjdGl2ZUB0aGVnZW50bGVtZW4=

thegentlemen: GEM Terminal

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Technology | Website: gem.com.tw | Infostealer data confirmed. | gem.com.tw zoominfo.com/c/gem-terminal-industry-co-ltd/46452181 Gem Terminal Ind. Co., Ltd. is engaged in the manufacture and sale of terminals used for electronic communication, automobile transportation and electrical plugs. The Company also offers ceramic ferrules, bushings and modules. During the year ended December 31, 2007, the Company obtained approximately 92% of its total revenue from terminals | Press: https://emops.twse.com.tw/server-java/t05sr01_1_e?&isNew=Y&seq_no=1&spoke_time=165538&spoke_date=20260401&co_id=2460 | Source: https://www.ransomware.live/id/R0VNIFRlcm1pbmFsQHRoZWdlbnRsZW1lbg==

thegentlemen: UK Electronics

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Manufacturing | Website: ukelectronics.co.uk | Infostealer data confirmed. | ukelectronics.co.uk zoominfo.com/c/uk-electronics-ltd/51921022 UK Electronics specializes in the manufacture of high-quality electronic assemblies, offering a comprehensive range of services including PCB assembly, mechanical assembly, and testing. With over 40 years of experience, they provide full turnkey solutions from concept to manufacture, catering to various industries such as military, aviation, medical, and manufacturing | Source: https://www.ransomware.live/id/VUsgRWxlY3Ryb25pY3NAdGhlZ2VudGxlbWVu

thegentlemen: PsychPlus

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: psychplus.com | Infostealer data confirmed. | psychplus.com zoominfo.com/c/psychplus/1319245304 PsychPlus is a Houston-based mental health company founded in 2019–2020, offering virtual and in-person care via licensed psychiatrists and therapists. It focuses on accessibility by accepting 99% of commercial insurances (including Medicare/Medicaid), providing same/next-day appointments, and enabling 24/7 online booking through its app and EHR platform, with over 200 providers and plans to expand into 20 new U.S. markets in 2025 | Source: https://www.ransomware.live/id/UHN5Y2hQbHVzQHRoZWdlbnRsZW1lbg==

thegentlemen: DYSA

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Healthcare | Website: dysa.com.py | Infostealer data confirmed. | dysa.com.py DYSA Healthcare S.A. is a family-founded Paraguayan company co-founded by Ricardo Hellmers Fonseca and Florencia Llano de Hellmers, dedicated to supplying healthcare technologies and services to hospitals and medical professionals in Paraguay | Source: https://www.ransomware.live/id/RFlTQUB0aGVnZW50bGVtZW4=

thegentlemen: Gesvalt

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Business Services | Website: gesvalt.es | Infostealer data confirmed. | gesvalt.es zoominfo.com/c/gesvalt/429923714 Gesvalt is a leading Spanish real estate valuation and appraisal company serving both private individuals and businesses. It offers official property appraisals for mortgage guarantees, asset distribution, and general valuation purposes, with prices starting from €75 for garages and storage units, and €165 for residential properties — reports are valid for all Spanish banks. Beyond standard appraisals, the company also provides sustainability consulting services, including BREEAM certification and decarbonization roadmaps for commercial real estate and hotel portfolios | Source: https://www.ransomware.live/id/R2VzdmFsdEB0aGVnZW50bGVtZW4=

thegentlemen: Ravands Plastech

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Manufacturing | Website: ravands.com | Infostealer data confirmed. | ravands.com zoominfo.com/c/ravands-plastech/347934317 Ravands Plastech is an Indian manufacturer based in Chittoor, Andhra Pradesh, founded in 2002 by a farmer's son with a mission to solve irrigation challenges for local farmers. The company produces thermoplastic ball valves, gate valves, non-return valves, filters, and drip irrigation components using high-quality polymers and CNC injection molding technology. With over 20 years of experience and nearly 7 million valves sold, Ravands is considered one of India's leading irrigation component manufacturers. | Source: https://www.ransomware.live/id/UmF2YW5kcyBQbGFzdGVjaEB0aGVnZW50bGVtZW4=

thegentlemen: Test Rite

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Business Services | Website: successwithtestrite.com | Infostealer data confirmed. | successwithtestrite.com Test Rite is a publicly listed Taiwanese company founded in 1978 and headquartered in Taipei, with nearly 40 years of expertise in export trading and global supply. It supplies quality products to major international retailers including Walmart, Sam's Club, Target, Staples, Carrefour, and Metro, operating across 10+ countries. Beyond B2B trading, the company runs its own retail brands — HOLA, HOLA CASA, TLW, and HOLA Petite — in Taiwan and China, making it a fully omni-channel enterprise. | Source: https://www.ransomware.live/id/VGVzdCBSaXRlQHRoZWdlbnRsZW1lbg==

thegentlemen: Aichi Electric

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Manufacturing | Website: aichidenki.jp | Infostealer data confirmed. | aichidenki.jp zoominfo.com/c/aichi-electric-co-ltd/425347408 Aichi Electric Co., Ltd., founded in 1942 and headquartered in Kasugai, Aichi Prefecture, Japan, is a publicly listed manufacturer of power equipment and industrial motors. The company produces transformers, distribution switchgear, control systems, and various motors for electric power infrastructure, serving utilities and industries across Japan and internationally. Operating under the motto "Active management, Technology training, Respect for human," Aichi Electric has offices and group companies nationwide and abroad, working toward its 100th anniversary vision of contributing to a sustainable society through manufacturing | Source: https://www.ransomware.live/id/QWljaGkgRWxlY3RyaWNAdGhlZ2VudGxlbWVu

thegentlemen: Tapon Corona

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Manufacturing | Website: taponcorona.com.mx | Infostealer data confirmed. | taponcorona.com.mx Tapon Corona S.A. de C.V. is a Mexican manufacturer based in Azcapotzalco, Mexico City, specializing in world-class crown caps (metal bottle caps) for beer and soft drink brands. The company is part of Grupo Zapata and operates alongside subsidiaries producing aluminum cans (Jalisco) and PET packaging (CDMX). | Source: https://www.ransomware.live/id/VGFwb24gQ29yb25hQHRoZWdlbnRsZW1lbg==

thegentlemen: Adaptavist Group LTD

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Technology | Website: adaptavist.com | Infostealer data confirmed. | Adaptavist Group LTD is a British platinum Atlassian partner and enterprise software developer serving Fortune 500 clients including NASA, Visa, Deutsche Bank, and government organizations. The company's flagship product is ScriptRunner for Atlassian Jira, Confluence, and Bitbucket. Complete infrastructure compromise: source code of all products (ScriptRunner, Salable licensing platform), 484,220 customer records from HubSpot CRM (GDPR violation), 20,000+ legal tickets with 33,000 documents including 2,000 NDAs and contracts, 3TB+ from Nexus repositories (production secrets, Docker images, Helm charts), Kubernetes, OAuth credentials, Snowflake Data Warehouse, Confluence (24,547 pages, 100+GB documentation), production databases. Licensing system compromised enabling product cloning. | Source: https://www.ransomware.live/id/QWRhcHRhdmlzdCBHcm91cCBMVE...

thegentlemen: EMCO Holding

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Manufacturing | Website: emcoholding.com | Infostealer data confirmed. | emcoholding.com Grupo EMCO Holding is a conglomerate of prestigious companies operating in different areas, guided by a philosophy of excellence and responsibility, with significant investments in Central America. In recent years, the group has diversified and has strongly positioned itself in fields such as the airport sector, cargo terminals, steel production, and steel manufacturing, and is currently developing energy generation projects. Thanks to its major projects, rapid growth, and investments, Grupo EMCO has established itself as one of the most important, strongest, and most prestigious groups in Central America. | Source: https://www.ransomware.live/id/RU1DTyBIb2xkaW5nQHRoZWdlbnRsZW1lbg==

thegentlemen: DGS

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: dgsts.com | Infostealer data confirmed. | dgsts.com DGS Technical Services is a structural steel and mechanical engineering firm that has been providing comprehensive design, detailing, and 3D modeling services since 2004. Based in Elgin, Illinois, they serve a variety of industrial and commercial clients, including those in the semiconductor and vending machine industries. | Source: https://www.ransomware.live/id/REdTQHRoZWdlbnRsZW1lbg==

thegentlemen: Win Academy

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Education | Website: Winacademy.net | Winacademy.net is an educational platform dedicated to preparing students for the JEE Main engineering entrance exam in India. It provides comprehensive details about the exam, including its pattern, syllabus, and eligibility criteria for top engineering institutes | Source: https://www.ransomware.live/id/V2luIEFjYWRlbXlAdGhlZ2VudGxlbWVu

thegentlemen: Mahyco Pvt

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Agriculture and Food Production | Website: mahyco.com | Infostealer data confirmed. | mahyco.com zoominfo.com/c/mahyco-pvt-ltd/23527722 Mahyco Private Limited is a pioneer in the research, development, production, processing, and marketing of high-quality hybrid and open-pollinated seeds for the Indian agricultural sector. Founded in 1964, the company aims to enhance the lives of farmers through innovative agricultural products and cutting-edge technology. Mahyco serves a diverse clientele of farmers across India, providing them with superior seed varieties that improve yield and profitability | Source: https://www.ransomware.live/id/TWFoeWNvIFB2dEB0aGVnZW50bGVtZW4=

thegentlemen: Ciarus

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Technology | Website: ciarus.de | Infostealer data confirmed. | ciarus.de zoominfo.com/c/ciarus/1324145982 Ciarus Technologies is a software development company based in Germany that specializes in custom software development, web and mobile app development, IT outsourcing, and DevOps services. They cater to businesses looking for tailored IT solutions to enhance their competitiveness in the digital landscape. With a focus on exceptional customer service and technical expertise, Ciarus aims to help clients bring their ideas to life through reliable and cost-effective technology | Source: https://www.ransomware.live/id/Q2lhcnVzQHRoZWdlbnRsZW1lbg==

thegentlemen: Hospital del Sur

Ransomware attack attributed to thegentlemen. | Country: AR | Sector: Healthcare | Website: hospitaldelsur.gov.co | Infostealer data confirmed. | hospitaldelsur.gov.co zoominfo.com/c/hospital-del-sur-itag-gabriel-jaramillo-piedrahita-sede-santamara/547031936 E.S.E Hospital del Sur is a healthcare institution located in Itagüí, Antioquia, Colombia, providing a range of medical services including general consultations, hospitalization, imaging, laboratory services, and emergency care | Source: https://www.ransomware.live/id/SG9zcGl0YWwgZGVsIFN1ckB0aGVnZW50bGVtZW4=

thegentlemen: Optima Servicios Financieros

Ransomware attack attributed to thegentlemen. | Country: MX | Sector: Financial Services | Website: optima.com.sv | Infostealer data confirmed. | optima.com.sv zoominfo.com/c/optima-servicios-financieros/372626508 Optima Sociedad de Ahorro y Crédito provides financial products and services tailored for the micro, small, and medium enterprises sector in El Salvador. The company offers various types of loans, including business, corporate, and personal loans, along with services such as basic services payment and remittances. With over 15 years of experience and international backing, Optima aims for dual profitability in its operations. Their commitment to customer service and transparency is supported by a range of financial solutions designed to assist their clients effectively | Source: https://www.ransomware.live/id/T3B0aW1hIFNlcnZpY2lvcyBGaW5hbmNpZXJvc0B0aGVnZW50bGVtZW4=

thegentlemen: ACE Consulting Engineers

Ransomware attack attributed to thegentlemen. | Country: EG | Sector: Business Services | Website: ace-mb.com | Infostealer data confirmed. | ace-mb.com rocketreach.co/ace-consulting-engineers-moharrambakhoum-profile_b6a453d5c87891f3 CE Moharam Bakhoum is a privately-owned international multidisciplinary engineering consultancy and project management organization, founded in 1950. With over 70 years of experience, ACE has become one of the most accomplished and well-renowned companies worldwide. We operate primarily across the Middle East, Africa, Asia, and Eastern Europe and have an exceptional portfolio of mega-projects and award-winning designs in more than 35 countries. Our services span across the entire range of construction-related activities; planning, design, project management and construction supervision, to name a few | Source: https://www.ransomware.live/id/QUNFIENvbnN1bHRpbmcgRW5naW5lZXJzQHRoZWdlbnRsZW1lbg==

thegentlemen: Thai Special Gas

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Energy | Website: tsgco.co.th | Infostealer data confirmed. | tsgco.co.th zoominfo.com/c/thai-special-gas-co-ltd/454621538 Thai Special Gas (TSG) specializes in providing high-quality industrial and energy gases, onsite gas generators, refrigerants, and related equipment. The company is dedicated to delivering exceptional customer service and integrated solutions, ensuring client satisfaction through advanced technology and rapid response. TSG also offers engineering services, quality control and laboratory testing, cylinder testing, and training programs for gas handling. With over 20 years of expertise | Source: https://www.ransomware.live/id/VGhhaSBTcGVjaWFsIEdhc0B0aGVnZW50bGVtZW4=

thegentlemen: Structures Stucco

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Construction | Website: structuresstucco.com | Infostealer data confirmed. | structuresstucco.com zoominfo.com/c/structures-stucco-llc/398264895 Structures Stucco, LLC is a stucco subcontractor based in Phoenix, Arizona, specializing in multi-family homes, single-family homes, and commercial buildings. The company is committed to providing quality work, honest service, and great value, ensuring customer satisfaction through top-quality stucco services. They offer written quotes with accurate estimates of time and budget before starting any project. Structures Stucco prioritizes delivering quality jobs without compromising affordability or speed of implementation | Source: https://www.ransomware.live/id/U3RydWN0dXJlcyBTdHVjY29AdGhlZ2VudGxlbWVu

thegentlemen: Thai Rung Union Car

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Transportation/Logistics | Website: thairung.co.th | Infostealer data confirmed. | thairung.co.th zoominfo.com/c/thai-rung-union-car-public-company-ltd/104628554 Thai Rung Union Car Public Company Limited focuses on providing high-quality automotive solutions tailored for the Thai market. The company emphasizes constant innovation and sustainable development in its operations. It aims to build a better community through its products and services. Their target clients include individuals and businesses seeking reliable and innovative automotive options | Source: https://www.ransomware.live/id/VGhhaSBSdW5nIFVuaW9uIENhckB0aGVnZW50bGVtZW4=

thegentlemen: Burning Rock Biotech

Ransomware attack attributed to thegentlemen. | Country: CN | Sector: Healthcare | Website: brbiotech.com | Infostealer data confirmed. | brbiotech.com zoominfo.com/c/burning-rock-biotech/426006520 Burning Rock Biotech Limited (NASDAQ: BNR), whose mission is to Guard Life via Science, focuses on the application of next generation sequencing (NGS) technology in the field of precision oncology. Its business consists of i) NGS-based therapy selection testing for late-stage cancer patients, with the leading market share in China and ii) NGS-based cancer early detection, which has moved beyond proof-of-concept R&D into the clinical validation stage | Source: https://www.ransomware.live/id/QnVybmluZyBSb2NrIEJpb3RlY2hAdGhlZ2VudGxlbWVu

thegentlemen: Metropolitan Pediatrics

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: metropeds.com | Infostealer data confirmed. | metropeds.com zoominfo.com/c/metropolitan-pediatrics/51350701 Metropolitan Pediatrics is an independent pediatrician practice with a 51-year history of providing quality care to Metropolitan Pediatrics's community. Metropolitan Pediatrics's pediatricians are all trained to manage and prevent health problems in infants, children, teens and young adults in the most friendly and cost effective manner possible | Source: https://www.ransomware.live/id/TWV0cm9wb2xpdGFuIFBlZGlhdHJpY3NAdGhlZ2VudGxlbWVu

thegentlemen: Synergy France

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Business Services | Website: synergy.fr | Infostealer data confirmed. | synergy.fr zoominfo.com/c/synergy-france/430369679 Synergy France specializes in data-centric solutions, assisting clients with data management projects, including integration, storage, and transformation in the cloud. They offer services in data analysis, reporting, data visualization, and data science, as well as governance through the establishment of data repositories. The company provides certified training programs in Lille and Paris, tailored to meet the specific needs of businesses | Source: https://www.ransomware.live/id/U3luZXJneSBGcmFuY2VAdGhlZ2VudGxlbWVu

thegentlemen: Heatherwood Golf Club

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Hospitality and Tourism | Website: www.zoominfo.com | https://www.zoominfo.com/c/heatherwood-golf-club/46681078 www.heatherwood.com For more than 60 years, Heatherwood has been committed to building upscale residential rental communities, commercial property and luxury urban spaces. Heatherwood is a privately owned, family run company founded on the principles of exemplary service, striking design, quality construction and appreciation for natural beauty. It is the company's commitment to these principles that has made Heatherwood one of the most highly regarded leaders in the industry. The company's formidable portfolio spans rental property from Brooklyn and Queens to the east end of Long Island. Heatherwood made its mark in the construction industry in the 1950's; building 5,000 homes across Long Island. The company has maintained the company's presence in the "for sale" real estate market with the completion of t...

thegentlemen: Innovision Holdings

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Consumer Services | Website: ivcorp.com | Infostealer data confirmed. | ivcorp.com zoominfo.com/c/innovision-holdings-corp/1132964507 Founded in 2004, InnoVision Holdings Corporation is a group of apparel and accessories companies that focus on brand developments, product innovation, global sales, marketing and distribution. From the company's luxury fashion division to the company's mass market fan wear subsidiary, InnoVisions companies combine innovative designs, high quality, utility with respected brands in their respective markets. Through its portfolio of brands, be it its fully owned or licensed, created or acquired, InnoVision designs, manufacture and distribute to a diverse base of retailers in luxury lifestyle, outdoor, speciality and mass markets in over 30 countries | Source: https://www.ransomware.live/id/SW5ub3Zpc2lvbiBIb2xkaW5nc0B0aGVnZW50bGVtZW4=

thegentlemen: Medici Group

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Financial Services | Website: themedicigroup.com | Infostealer data confirmed. | themedicigroup.com zoominfo.com/c/medici-group-llc/348014372 Via Renaissance offers a subscription-based enterprise solution designed to enhance organizational performance through innovative methods developed over 20 years of research and 15 years of consulting. Their approach, known as MOVES, enables organizations to implement simple, actionable changes that foster high-performance behaviors and adaptability. Targeting government organizations, they provide tailored support and resources, including an AI Coach and performance engineering sessions, to facilitate sustained change | Source: https://www.ransomware.live/id/TWVkaWNpIEdyb3VwQHRoZWdlbnRsZW1lbg==

thegentlemen: Far East Fame

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Consumer Services | Website: fareastfamelineddb.com | Infostealer data confirmed. | fareastfamelineddb.com zoominfo.com/c/far-east-fame-line-ddb-plc/455777113 Far East Fame Line DDB is a data-driven advertising and marketing communications agency . The company specializes in "Connected Creative Solutions," combining data analytics, AI technology, and creative strategy to build brand platforms and deliver performance marketing campaigns . Their approach focuses on understanding the customer journey and behavioral insights to drive brand momentum in the modern digital landscape | Source: https://www.ransomware.live/id/RmFyIEVhc3QgRmFtZUB0aGVnZW50bGVtZW4=

thegentlemen: alloha.com

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Consumer Services | Website: alloha.com | Infostealer data confirmed. | alloha.com zoominfo.com/c/alloha-fibra/1318975911 Alloha is the largest independent FTTH (Fiber To The Home) operator in Brazil, founded in 2018 and headquartered in Sao Paulo. The company has a network of over 140,000 km of optical fiber and serves 1.5 million customers across 280 cities | Source: https://www.ransomware.live/id/YWxsb2hhLmNvbUB0aGVnZW50bGVtZW4=

thegentlemen: Gaposa

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Manufacturing | Website: gaposa.it | Infostealer data confirmed. | gaposa.it zoominfo.com/c/gaposa-srl/372820509 Founded in 1969, Gaposa has persevered from its first years of activity in a constant R&D policy in order to anticipate market changes. With a number of patents and a 100% Italian production, Gaposa has strengthened its position as one of the leaders in both the industrial and residential markets | Source: https://www.ransomware.live/id/R2Fwb3NhQHRoZWdlbnRsZW1lbg==

thegentlemen: St Fabian

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Education | Website: stfabian.org | Infostealer data confirmed. | stfabian.org zoominfo.com/c/st-fabian-catholic-church--school/152879338 St. Fabian Catholic Church & School, located in Farmington Hills, MI, offers a range of religious services and educational programs. The church provides sacraments, youth ministry, and various community activities, while the school focuses on academic excellence and student engagement. | Source: https://www.ransomware.live/id/U3QgRmFiaWFuQHRoZWdlbnRsZW1lbg==

thegentlemen: GCA Group

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: gcagroupllc.com | Infostealer data confirmed. | gcagroupllc.com zoominfo.com/c/gca-group-llc/539618075 GCA Group LLC (Global Capital Advisors Group LLC) is an international business development and capital formation advisory firm focused on start-ups, early-stage businesses, alternative asset managers, and philanthropic organizations worldwide. Their services include capital introductions, marketing, brand management, new product development plans, and event coordination and logistics. The company is privately held, headquartered in Houston, Texas, with approximately 6 employees and annual revenues of around $7.2 million | Source: https://www.ransomware.live/id/R0NBIEdyb3VwQHRoZWdlbnRsZW1lbg==

thegentlemen: GCA Professional

Ransomware attack attributed to thegentlemen. | Country: HK | Sector: Business Services | Website: gca-group.com | Infostealer data confirmed. | gca-group.com zoominfo.com/c/gca-professional-services-group-ltd/346680381 GCA Professional Services Group is a leading financial services provider headquartered in Hong Kong, with over 25 years of experience serving blue-chip institutional, corporate, and individual clients globally. Its core services include valuation and advisory, corporate finance, mining and mineral consultancy, and corporate services. | Source: https://www.ransomware.live/id/R0NBIFByb2Zlc3Npb25hbEB0aGVnZW50bGVtZW4=

thegentlemen: Das Labor

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Healthcare | Website: daslabor.eu | Infostealer data confirmed. | daslabor.eu zoominfo.com/c/friedrich-holzweber/549578383 is an Austrian private medical and chemical diagnostic laboratory led by Dr. Margit Striednig-Zechner and Dr. Beatrix Sterz. The lab offers a dedicated online ordering system called Cyberlab for referring physicians and healthcare professionals, emphasizing quality-oriented and service-driven care. It is a regional clinical diagnostics practice focused on delivering reliable medical and chemical laboratory testing to local healthcare providers | Source: https://www.ransomware.live/id/RGFzIExhYm9yQHRoZWdlbnRsZW1lbg==

thegentlemen: Zanzi

Ransomware attack attributed to thegentlemen. | Country: IT | Sector: Manufacturing | Website: zanzi.com | Infostealer data confirmed. | zanzi.com rocketreach.co/zanzi-spa-profile_b420e827fee433b4 Zanzi S.p.A. is an Italian engineering company founded in 1920 by Giovanni Zanzi in Ivrea, Turin, recognized as a global leader in high-performance valve manufacturing for engines. The company serves the aeronautical, motor racing, motorbike racing, and marine diesel sectors, producing mono- and bi-metallic intake/exhaust valves and sodium-cooled hollow valves — a technology they invented and patented in the 1930s | Source: https://www.ransomware.live/id/WmFuemlAdGhlZ2VudGxlbWVu

thegentlemen: UCPS

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Public Sector | Website: ucpsthai.com | Infostealer data confirmed. | ucpsthai.com United Creation Packaging Solutions (Thailand) Co., Ltd (UCPS) is a leading large-scale integrated packaging and printing company based in Thailand, established in 1994. It is recognized as Asia's largest packaging company and holds the prestigious title of No. 1 in Forest and Paper Products. The company focuses on sustainable, innovative, and eco-friendly packaging solutions for global markets. | Source: https://www.ransomware.live/id/VUNQU0B0aGVnZW50bGVtZW4=

thegentlemen: Terminal 21

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Transportation/Logistics | Website: terminal21.co.th | Infostealer data confirmed. | terminal21.co.th zoominfo.com/c/terminal-21/425950251 Terminal21 is a unique shopping complex that brings together the essence of global shopping experiences under one roof, catering to diverse lifestyles. The mall features a themed design inspired by famous shopping streets and landmarks from eight major cities around the world. With a focus on convenience and a wide variety of merchandise and food options, Terminal21 aims to provide an extraordinary shopping experience. | Source: https://www.ransomware.live/id/VGVybWluYWwgMjFAdGhlZ2VudGxlbWVu

thegentlemen: AIRCOS

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Transportation/Logistics | Website: aircospascual-anjac.com | Infostealer data confirmed. | aircospascual-anjac.com rocketreach.co/aircos-profile_b5cafd62f42e1406 Aircos Pascual is a French industrial cosmetics manufacturer and part of the ANJAC Group, specializing in hybrid makeup technologies — loose powders, hot-cast formulas, lip fluids, and foundation fluids. With 300 employees, 25 R&D specialists, 450 active formulas, and 3 production sites across France, the company serves leading beauty brands from ideation through launch. | Source: https://www.ransomware.live/id/QUlSQ09TQHRoZWdlbnRsZW1lbg==

thegentlemen: **********.com

Ransomware attack attributed to thegentlemen. | Sector: Technology | A major IT company developing enterprise software for team collaboration and project management for enterprise clients. 1900 NDA files. Source code. All top 50 fortune clients in 1 place. | Source: https://www.ransomware.live/id/KioqKioqKioqKi5jb21AdGhlZ2VudGxlbWVu

thegentlemen: jrk.com

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Business Services | Website: jrk.com | Infostealer data confirmed. | A leading real estate investment and property management company specializing in multifamily and commercial assets. The data includes a breach involving 111,000 Social Security numbers from the company jrk.com. Responsibility for the publication will lie with both the company itself and the insurance providers servicing it - mash.com (the intermediary) and the primary insurer beazley.com - which fails to properly value its clients’ data and is deliberately ignoring communications in an attempt to avoid payment, thereby putting the company at risk. | Source: https://www.ransomware.live/id/anJrLmNvbUB0aGVnZW50bGVtZW4=

thegentlemen: Equity Life

Ransomware attack attributed to thegentlemen. | Country: ID | Sector: Financial Services | Website: equity.co.id | Infostealer data confirmed. | equity.co.id zoominfo.com/c/equity-life-indonesia/372772715 Equity Life Indonesia offers a range of life and health insurance solutions tailored for individual clients, corporate employee benefits, and retail insurance through various distribution channels. Their services include professional agency support, bancassurance partnerships, and customizable employee benefit programs to ensure the safety and well-being of employees | Source: https://www.ransomware.live/id/RXF1aXR5IExpZmVAdGhlZ2VudGxlbWVu

thegentlemen: Zamek Namest

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Hospitality and Tourism | Website: zamek-namest.cz | Infostealer data confirmed. | zamek-namest.cz is a historic Czech town famous for its Renaissance chateau and a unique 18th-century Baroque bridge decorated with 20 statues. It serves as a cultural hub in the Vysocina region, hosting the popular Folk Holidays music festival and various art exhibitions. The town is also strategically significant due to its proximity to the Namest military airbase and the Dukovany nuclear power plant | Source: https://www.ransomware.live/id/WmFtZWsgTmFtZXN0QHRoZWdlbnRsZW1lbg==

thegentlemen: Dreamtoy

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Consumer Services | Website: dreamtoy.co.th | Infostealer data confirmed. | dreamtoy.co.th zoominfo.com/c/dreamtoy/539777419 Dream Toy Co., Ltd. specializes in the sale of authentic Japanese toys, including popular brands such as BANDAI, GUNDAM, KAMEN RIDER, and SENTAI. The company offers a wide range of products including action figures, model kits, and collectibles aimed at enthusiasts and fans of Japanese pop culture | Source: https://www.ransomware.live/id/RHJlYW10b3lAdGhlZ2VudGxlbWVu

thegentlemen: Americo Advogados

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Business Services | Website: americoadvogados.com.br | Infostealer data confirmed. | americoadvogados.com.br zoominfo.com/c/americo-advogados-associados/513361264 Americo Advogados Associados is a Brazilian private law firm founded in 1995 and headquartered in Anápolis, Goiás, Brazil. The firm is a mid-to-large legal practice with 201–500 employees, offering a full range of legal services for individuals and businesses. It is one of the more established regional law firms in the Centre-West of Brazil, serving clients from its main office on Rua Engenheiro Portela in central Anápolis | Source: https://www.ransomware.live/id/QW1lcmljbyBBZHZvZ2Fkb3NAdGhlZ2VudGxlbWVu

thegentlemen: CH Express

Ransomware attack attributed to thegentlemen. | Country: VE | Sector: Transportation/Logistics | Website: chxpress.com.ve | Infostealer data confirmed. | chxpress.com.ve C.H. Express C.A. is a Venezuelan logistics and light cargo transport company with over 20 years of experience in the national market. Based in San Diego, Carabobo state — a strategically central location — the company offers parcel delivery (encomiendas), cargo consolidation, and nationwide distribution across all Venezuelan states. The company continuously invests in fleet renewal, staff training, and technology to maintain efficiency and reliability throughout Venezuela | Source: https://www.ransomware.live/id/Q0ggRXhwcmVzc0B0aGVnZW50bGVtZW4=

thegentlemen: Jati Tinggi

Ransomware attack attributed to thegentlemen. | Country: MY | Sector: Manufacturing | Website: jatitinggi.com | Infostealer data confirmed. | jatitinggi.com zoominfo.com/c/jati-tinggi-holding-sdn-bhd/399353498 Jati Tinggi Group Berhad, founded in 2003 and headquartered in Cheras, Selangor, Malaysia, is a publicly listed infrastructure utilities engineering company (KLSE: JTGROUP). The company specialises in underground and overhead utilities for electricity transmission & distribution, fiber optic networks, drainage, sewerage pipelines, substation EPCC services, and street lighting. It operates as a subsidiary of Broad River Capital Sdn Bhd, employs 51–200 people, and recently won an RM80 million contract from TNB (Tenaga Nasional Berhad) | Source: https://www.ransomware.live/id/SmF0aSBUaW5nZ2lAdGhlZ2VudGxlbWVu

thegentlemen: Sunspray Food

Ransomware attack attributed to thegentlemen. | Country: ZA | Sector: Agriculture and Food Production | Website: sunspray.co.za | Infostealer data confirmed. | sunspray.co.za zoominfo.com/c/sunspray-food-ingredients-ltd/425184083 Sunspray Solutions (Pty) Ltd, founded in 1944 and headquartered in Johannesburg, South Africa, is the country's largest independent manufacturer of spray-dried food ingredients. The company operates 10 spray dryers across two manufacturing sites (Industria, Johannesburg and Bronkhorstspruit, Gauteng), producing hundreds of products including caramel powders, fat powders, fruit & vegetable powders, creamers, egg powders, and cheese powders. In 2023, Israeli company Turpaz Industries acquired a 55% controlling stake, enabling Sunspray's geographic and portfolio expansion | Source: https://www.ransomware.live/id/U3Vuc3ByYXkgRm9vZEB0aGVnZW50bGVtZW4=

thegentlemen: Cosmo Group

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Manufacturing | Website: cosmo.co.th | Infostealer data confirmed. | cosmo.co.th zoominfo.com/c/cosmo-group-public-co/459326707 Cosmo Group PCL, founded in 1964 and headquartered in Bangkok (Sukhumvit), is a Thai luxury packaging manufacturer with over 60 years of experience. The company specializes in premium gift boxes, displays, watch dials, cases, and accessories for global luxury brands in jewelry, watches, cosmetics, and perfume. With 1,000–5,000 employees and a Swiss sales office (Cosmo Pusterla 1880), Cosmo serves top-tier international clients and holds multiple quality and sustainability certifications | Source: https://www.ransomware.live/id/Q29zbW8gR3JvdXBAdGhlZ2VudGxlbWVu

thegentlemen: SYSTHERM INFO

Ransomware attack attributed to thegentlemen. | Country: PL | Sector: Technology | Website: systherm-info.pl | Infostealer data confirmed. | systherm-info.pl Systherm Info Sp. z o.o. is a Polish IT company headquartered in Poznan, founded in 1996. It specializes in GIS (Geographic Information Systems), IT solutions, and software security — most notably developing GEO-INFO, a leading land information system widely used in Polish geodesy and surveying. The company also distributes world-class software protection solutions (Sentinel/Gemalto) and holds ISO quality certifications | Source: https://www.ransomware.live/id/U1lTVEhFUk0gSU5GT0B0aGVnZW50bGVtZW4=

thegentlemen: Sgt

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Business Services | Website: sgt-pet.com | Infostealer data confirmed. | sgt-pet.com zoominfo.com/c/sgt/370244282 SGT founded in 1981 and based in France, is a specialist in PET and RPET packaging . The company designs and manufactures PET/RPET preforms (mono- and multi-layer), HDPE caps, and bottles for the beverage and industrial sectors . With over 200 employees, 26 injection presses, and two recycled PET (SGR) factories, SGT is strongly committed to eco-responsibility and circular packaging . | Source: https://www.ransomware.live/id/U2d0QHRoZWdlbnRsZW1lbg==

thegentlemen: Friktimporten Stockholm

Ransomware attack attributed to thegentlemen. | Country: SE | Sector: Consumer Services | Website: fruktimporten.se | Infostealer data confirmed. | fruktimporten.se rocketreach.co/fruktimporten-stockholm-ab-profile_b7bc38e2c53a0296 Fruktimporten Stockholm AB, founded in 2013 and based in Norsborg (Stockholm), is the leading fruit and vegetable wholesaler in the Mälardalen region. They stock over 950 products across a ~5,000 m² warehouse, offering fresh produce from around the world — loose, packed, cut, and processed. The company is part of Dole Nordic AB, a subsidiary of the global giant Dole plc | Source: https://www.ransomware.live/id/RnJpa3RpbXBvcnRlbiBTdG9ja2hvbG1AdGhlZ2VudGxlbWVu

thegentlemen: Casa Andina

Ransomware attack attributed to thegentlemen. | Country: CO | Sector: Hospitality and Tourism | Website: casaandina.com.co | Infostealer data confirmed. | casaandina.com.co zoominfo.com/c/casa-andina/426558931 Casa Andina SAS is the leading hardware and construction materials distributor in south-western Colombia, headquartered in Pasto, Nariño. The company serves both wholesale and retail channels, offering a specialized portfolio including plumbing, drainage, lightweight construction systems (drywall), architectural carpentry, paints, ceramics, and chemical construction products. With 51–200 employees and nationwide online delivery across Colombia, Casa Andina positions itself as a one-stop specialist solutions provider for builders and renovators | Source: https://www.ransomware.live/id/Q2FzYSBBbmRpbmFAdGhlZ2VudGxlbWVu

thegentlemen: Distritech

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Consumer Services | Website: distritech.com | Infostealer data confirmed. | distritech.com zoominfo.com/c/distritech-llc/358799326 DISTRITECH LLC offers a wide range of consumer electronics and accessories, including audio and video equipment, computers, cameras, mobility devices, gaming products, wearables, smart home solutions, and home living items. The company targets technology enthusiasts and everyday consumers seeking high-quality electronic products and personalized service. With a commitment to providing updated inventories and quick warranty support, DISTRITECH emphasizes exceptional customer experience and market insights. Additionally, they provide options for vendor registration and a range of weekly deals, making technology accessible and affordable to their clients | Source: https://www.ransomware.live/id/RGlzdHJpdGVjaEB0aGVnZW50bGVtZW4=

thegentlemen: Omikenshi

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Manufacturing | Website: omikenshi.co.jp | Infostealer data confirmed. | omikenshi.co.jp zoominfo.com/c/omikenshi-co-ltd/372144961 Omikenshi specializes in the production of textiles, including cotton and yarn, as well as advanced processing technologies. The company also offers a range of lifestyle products, cosmetics, and software development services. Their intended clients include businesses seeking office supplies and electronic catalogs. Additionally, Omikenshi is committed to environmental sustainability and actively engages in eco-friendly practices | Source: https://www.ransomware.live/id/T21pa2Vuc2hpQHRoZWdlbnRsZW1lbg==

thegentlemen: Grupo Tawa

Ransomware attack attributed to thegentlemen. | Country: PE | Sector: Business Services | Website: grupotawa.com | Infostealer data confirmed. | grupotawa.com zoominfo.com/c/grupo-tawa/459512890 Grupo Tawa is a business group operating in Peru and Chile, dedicated to providing comprehensive business solutions that allow clients to focus on their core competencies. With over 18 years of experience, they offer expertise in personnel solutions, process outsourcing, cleaning, maintenance, and commercial management. The group serves more than 2,500 clients and employs over 15,000 individuals annually. Their commitment to excellence positions them as a reliable partner for companies across various industries | Source: https://www.ransomware.live/id/R3J1cG8gVGF3YUB0aGVnZW50bGVtZW4=

thegentlemen: Delta Ducon Engenharia

Ransomware attack attributed to thegentlemen. | Country: BR | Sector: Manufacturing | Website: deltaducon.com.br | Infostealer data confirmed. | deltaducon.com.br zoominfo.com/c/delta-ducon-engenharia/372415810 Delta Ducon is a company with over 25 years of experience in environmental systems and technologies, specializing in air emission control, dust removal processes, gas washing and treatment, and water treatment. They offer a comprehensive range of equipment and solutions, including pneumatic transport and handling technologies. Their products cater to various sectors such as metallurgy, chemical, pharmaceutical, food, and construction industries. Delta Ducon prioritizes environmental sustainability and provides complete systems with guaranteed performance | Source: https://www.ransomware.live/id/RGVsdGEgRHVjb24gRW5nZW5oYXJpYUB0aGVnZW50bGVtZW4=

thegentlemen: PTT Philippines

Ransomware attack attributed to thegentlemen. | Country: PH | Sector: Energy | Website: pttphilippines.com | Infostealer data confirmed. | pttphilippines.com zoominfo.com/c/ptt-philippines-corp/353484173 PTT Philippines Corporation, a subsidiary of Thailand's PTT Oil and Retail Business Public Company Limited, specializes in the trading of petroleum products across retail, wholesale, and commercial markets. The company offers a range of high-performance fuels, lubricants, and services, aiming to enhance customer satisfaction and fuel efficiency. Targeting both individual consumers and businesses, PTT Philippines is committed to providing products of international standards while expanding its market presence in the Philippines. With a focus on innovation and quality, PTT Philippines also engages in corporate social responsibility initiatives to support local communities | Source: https://www.ransomware.live/id/UFRUIFBoaWxpcHBpbmVzQHRoZWdlbnRsZW1lbg==

thegentlemen: SATS Sports Club Sweden

Ransomware attack attributed to thegentlemen. | Country: SE | Sector: Hospitality and Tourism | Website: sats.se | Infostealer data confirmed. | sats.se zoominfo.com/c/sats-sports-club-sweden-ab/431547514 SATS is the largest fitness chain in the Nordics, founded in Sweden in 1995 with a mission to make people healthier and happier. Operating under the brands SATS, ELIXIA, and Fresh Fitness, the group runs over 274 clubs across Norway, Sweden, Finland, and Denmark, serving 733,000 members with 10,000 employees. It is also one of the five largest fitness operators in Europe, offering gym facilities, group classes, personal training, and digital fitness tools | Source: https://www.ransomware.live/id/U0FUUyBTcG9ydHMgQ2x1YiBTd2VkZW5AdGhlZ2VudGxlbWVu

thegentlemen: MEDICUS SHUPPAN

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Healthcare | Website: medica.co.jp | Infostealer data confirmed. | medica.co.jp zoominfo.com/c/medicus-shuppan-co-ltd/463963337 is dedicated to providing enjoyable learning experiences for healthcare professionals through a variety of products and services, including seminar books and digital content. The company aims to support the education of medical practitioners and contribute to the future of healthcare. They also focus on sustainability and creating valuable content that serves as a backbone in the medical field. Their intended clients include healthcare professionals, authors, and bookstores | Source: https://www.ransomware.live/id/TUVESUNVUyBTSFVQUEFOQHRoZWdlbnRsZW1lbg==

thegentlemen: Groupe Caddac

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Construction | Website: groupe-caddac.com | Infostealer data confirmed. | groupe-caddac.com Groupe CADDAC is a French construction materials company founded in 1962, specializing in ready-mix concrete (RMC), prefabricated concrete elements, aggregates, and building materials. Headquartered in Donges, Pays de la Loire, the group operates 19 concrete plants along France's Atlantic coast and employs between 200 and 500 people. It ranks among the top 7 regional ready-mix concrete producers in France | Source: https://www.ransomware.live/id/R3JvdXBlIENhZGRhY0B0aGVnZW50bGVtZW4=

thegentlemen: Micro Leasing

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Financial Services | Website: microleasingplc.com | Infostealer data confirmed. | microleasingplc.com zoominfo.com/c/micro-leasing/482150678 Micro Leasing Public Company Limited specializes in providing financing services for second-hand trucks, including truck purchase loans and refinancing options. The company targets clients in need of commercial vehicles, positioning itself as a leader in the second-hand truck financing sector in Thailand. In addition to truck financing, they also offer motorcycle loans and insurance brokerage services. Micro Leasing aims to support business expansion and improve liquidity for its clients while providing excellent consulting services | Source: https://www.ransomware.live/id/TWljcm8gTGVhc2luZ0B0aGVnZW50bGVtZW4=

thegentlemen: Rajagiri Hospital

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Healthcare | Website: rajagirihospital.com | Infostealer data confirmed. | rajagirihospital.com zoominfo.com/c/rajagiri-hospital/358774283 At Rajagiri Hospital, the company's Neonatal Intensive Care Unit (NICU) provides care for babies after birth who need special attention. Some of the reasons include preterm birth, low birth weight, breathing difficulty, low blood sugar and infection. The company's level 2 beds in the nursery provide care for some babies who are convalescing but who continue to require the services of a specialized hospital. Physicians, nurses and support staff who work in the NICU are available 24 hours a day, 7 days a week. .Parents are encouraged to be active members of the team that takes care of their infant while in the company's unit. The company's nurses understand the unique medical needs of infants and can teach parents to understand how best to care for their babies | Source: https://www...

thegentlemen: Cerio

Ransomware attack attributed to thegentlemen. | Country: TW | Sector: Technology | Website: cerio.io | Infostealer data confirmed. | cerio.io zoominfo.com/c/rockport-networks-inc/1330256755 Cerio is an accelerated computing platform focused on next-generation data center infrastructure for AI workloads . The company specialises in disaggregated infrastructure — decoupling compute, memory, and storage resources beyond a single PCIe domain to enable elastic capacity and optimized data movement at scale . Their approach aims to eliminate the "capacity trap" of traditional tightly integrated systems, making AI infrastructure more agile and efficient | Source: https://www.ransomware.live/id/Q2VyaW9AdGhlZ2VudGxlbWVu

thegentlemen: MicroChem

Ransomware attack attributed to thegentlemen. | Country: PT | Sector: Technology | Website: microchem.pt | Infostealer data confirmed. | microchem.pt zoominfo.com/c/microchem/480964446 Microchem - Ensaios e Analises Tecnicas, Lda is a Portuguese technical testing and analysis laboratory founded in 2006, located in Matosinhos, Porto. The company specialises in technical testing and analytical services (CAE 71200), supporting industries with quality control, material testing, and compliance verification.Microchem serves as a trusted partner for businesses requiring precise and reliable laboratory analysis. | Source: https://www.ransomware.live/id/TWljcm9DaGVtQHRoZWdlbnRsZW1lbg==

thegentlemen: Economia

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Business Services | Website: economia.cz | Infostealer data confirmed. | economia.cz zoominfo.com/c/economia-as/426681440 Economia is a leading Czech media house founded in 1990, publishing prestigious economic and professional periodicals. The company publishes Hospodářské noviny daily and Ekonom weekly. With approximately 500 to 1,000 employees, Economia reaches 66 percent of Czech business owners and top management, positioning itself as a symbol of free journalism and valuable content. The media house focuses on digital transformation while maintaining high-quality print publications, serving decision-makers and opinion leaders across the country. | Source: https://www.ransomware.live/id/RWNvbm9taWFAdGhlZ2VudGxlbWVu

thegentlemen: Excellentiam

Ransomware attack attributed to thegentlemen. | Country: CO | Sector: Business Services | Website: excellentiam.co | Infostealer data confirmed. | excellentiam.co zoominfo.com/c/excellentiam-soluciones-empresariales/372558079 Excellentiam offers comprehensive BPO, KYC, and IT support services. Their solutions include end-to-end Client Knowledge Form management with identity validation and electronic signature, plus a national IT Service Desk for technical support. They also provide on-site or off-site operational outsourcing, advanced document management covering the entire document lifecycle, and specialized consulting to optimize business processes with efficiency and quality. | Source: https://www.ransomware.live/id/RXhjZWxsZW50aWFtQHRoZWdlbnRsZW1lbg==

thegentlemen: 2LG Prod

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Manufacturing | Website: 2lg-prod.com | Infostealer data confirmed. | 2lg-prod.com zoominfo.com/c/2lg-prod/532401614 2LG PROD S.r.l. is an Italian company specializing in the design and production of professional cleaning machines and floor maintenance equipment. They offer a wide range of products including scrubber dryers, sweepers, and vacuum cleaners for industrial and commercial use. The company focuses on innovation, reliability, and high performance to meet diverse cleaning needs. | Source: https://www.ransomware.live/id/MkxHIFByb2RAdGhlZ2VudGxlbWVu

thegentlemen: Vexin Normand

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Public Sector | Website: cdc-vexin-normand.fr | Infostealer data confirmed. | cdc-vexin-normand.fr zoominfo.com/c/cdc-vexin-normandfr/1316064619 The Communauté de Communes du Vexin Normand offers a wide range of services including health care, public services, and cultural activities to support the local community. It focuses on various sectors such as health, education, mobility, and economic development, catering to residents and businesses in the Vexin Normand area. The community also promotes tourism and recreational activities, providing facilities like swimming pools, gyms, and libraries. Their initiatives aim to enhance the quality of life and foster a connected and sustainable environment for all inhabitants | Source: https://www.ransomware.live/id/VmV4aW4gTm9ybWFuZEB0aGVnZW50bGVtZW4=

thegentlemen: GPAINNOVA

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Technology | Website: gpainnova.com | Infostealer data confirmed. | gpainnova.com zoominfo.com/c/gpainnova/467953270 GPAINNOVA is a leading tech company specializing in surface finishing machinery for metal polishing and medical device manufacturing. They are also known for their innovative power electronics and energy storage systems. With a strong global presence, they focus on high-tech, sustainable solutions. | Source: https://www.ransomware.live/id/R1BBSU5OT1ZBQHRoZWdlbnRsZW1lbg==

thegentlemen: Kabelovna Kabex

Ransomware attack attributed to thegentlemen. | Country: CZ | Sector: Telecommunication | Website: kabex.cz | Infostealer data confirmed. | kabex.cz rocketreach.co/kabelovna-kabex-as-profile_b5947399f662772e Kabelovna Kabex is a Czech special cable manufacturer founded in 1994 . The company specializes in cables for nuclear power plants (including LOCA-cables), hermetic cable penetrations, and power cables up to 30 kV . Kabex is a key supplier to Czech and Slovak nuclear plants and has supplied projects like the Kudankulam NPP in India | Source: https://www.ransomware.live/id/S2FiZWxvdm5hIEthYmV4QHRoZWdlbnRsZW1lbg==

thegentlemen: BCN Medical

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Healthcare | Website: bcnmedical.com | Infostealer data confirmed. | bcnmedical.com zoominfo.com/c/bcn-medical/375204700 BCN Medical is a Colombian pharmaceutical distributor based in Bogotá . Founded in 1999, the company distributes medications, supplements, and medical devices. It was acquired by Faes Farma in a merger and acquisition deal. | Source: https://www.ransomware.live/id/QkNOIE1lZGljYWxAdGhlZ2VudGxlbWVu

thegentlemen: Chase Asia

Ransomware attack attributed to thegentlemen. | Country: JP | Sector: Financial Services | Website: chase.co.th | Infostealer data confirmed. | chase.co.th zoominfo.com/c/chase-asia-co-ltd/463991442 Chase Asia is a Thai public company specializing in debt collection and management of non-performing loans (NPLs) . Founded in 1998 and headquartered in Nonthaburi, it also provides lending services and legal collection support | Source: https://www.ransomware.live/id/Q2hhc2UgQXNpYUB0aGVnZW50bGVtZW4=

thegentlemen: Canal Capital

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Financial Services | Website: canalcapital.gov.co | Infostealer data confirmed. | canalcapital.gov.co zoominfo.com/c/canal-capital/459823596 Canal Capital is a media organization based in Bogotá, Colombia, providing a variety of programming that includes documentaries and series focused on social issues, cultural expressions, and community engagement. Their services aim to create transparency and facilitate citizen participation through diverse media content, including programs specifically designed for different age groups and interests. The company primarily targets the local audience in Bogotá, as well as anyone interested in Colombian culture and social matters. Their initiatives also involve collaborations with citizens, promoting awareness on environmental, social, and health issues | Source: https://www.ransomware.live/id/Q2FuYWwgQ2FwaXRhbEB0aGVnZW50bGVtZW4=

thegentlemen: Payap University

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Education | Website: payap.ac.th | Infostealer data confirmed. | payap.ac.th zoominfo.com/c/payap-university/29803045 Payap University is an international educational institution offering a variety of programs, including interdisciplinary studies and multiple international programs. It provides services such as student exchange programs, language enhancement, and various proficiency testing centers. The university aims to cater to a diverse international clientele seeking higher education and innovation opportunities. Additionally, it hosts events like the International Conference on Lifespan Innovation | Source: https://www.ransomware.live/id/UGF5YXAgVW5pdmVyc2l0eUB0aGVnZW50bGVtZW4=

thegentlemen: Cortporation Colina

Ransomware attack attributed to thegentlemen. | Country: CL | Sector: Public Sector | Website: corporacioncolina.cl | Infostealer data confirmed. | corporacioncolina.cl zoominfo.com/c/contacto--corporación-colina/472370437 Corporación Colina is a municipal social development corporation that offers a wide range of services in education and health. Their educational services include various preschools and schools, while their health services encompass community pharmacies, mobile health units, and urgent care facilities. The corporation aims to support the local community, particularly focusing on children, the elderly, and those in need of healthcare. Their intended clients include families, students, and residents of Colina seeking educational and health resources | Source: https://www.ransomware.live/id/Q29ydHBvcmF0aW9uIENvbGluYUB0aGVnZW50bGVtZW4=

thegentlemen: Centro de Especialidades

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Healthcare | Website: ceaca.net | Infostealer data confirmed. | ceaca.net zoominfo.com/c/centro-de-especialidades-anzoátegui-ca---ceaca/467549041 Centro de Especialidades Anzotegui, CA - CEACA is a well-known medical center serving patients in eastern Venezuela and the Caribbean islands since 1971. We offer complete health services including emergency care, specialized medical consultations, surgery, and intensive care for adults and newborns. Our team provides compassionate treatment with a deep respect for human life and patient well-being | Source: https://www.ransomware.live/id/Q2VudHJvIGRlIEVzcGVjaWFsaWRhZGVzQHRoZWdlbnRsZW1lbg==

thegentlemen: Caribbean Medical Center

Ransomware attack attributed to thegentlemen. | Country: PR | Sector: Healthcare | Website: www.caribbeanmedicalcenter.com | www.caribbeanmedicalcenter.com https://www.zoominfo.com/c/caribbean-medical-center/402918703 Hospital Caribbean Medical Center provides emergency services and inpatient care, catering to pediatric, adult, and geriatric patients. The emergency room operates 24/7, ensuring continuous medical coverage tailored to patient needs. The facility offers a range of specialized services, including internal medicine, infectious diseases, cardiology, radiology, obstetrics and gynecology, pediatrics, and surgery. With a commitment to exceptional medical care, the center emphasizes quality and patient satisfaction. Last chance before full data disclosure. | Press: https://www.metro.pr/noticias/2026/03/06/caribbean-medical-center-en-fajardo-sufrio-ataque-cibernetico/ | Source: https://www.ransomware.live/id/Q2FyaWJiZWFuIE1lZGljYWwgQ2VudGVyQHRoZWdlbnRsZW1lbg==

thegentlemen: St Fabian Catholic

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Education | Website: stfabian.org | Infostealer data confirmed. | stfabian.org zoominfo.com/c/st-fabian-catholic-church--school/152879338 St. Fabian Catholic Church and School in Farmington Hills, MI offers a range of religious services and educational programs. Their services include various sacraments such as Baptism, Confirmation, and Eucharist, along with community involvement through worship and youth ministries. They aim to provide a welcoming environment for parishioners and students, encouraging participation and growth within the church community. The intended clients are families and individuals seeking spiritual guidance and quality education in a Catholic setting | Source: https://www.ransomware.live/id/U3QgRmFiaWFuIENhdGhvbGljQHRoZWdlbnRsZW1lbg==

thegentlemen: ControlGMC

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Manufacturing | Website: controlgmc.com | Infostealer data confirmed. | controlgmc.com zoominfo.com/c/controlgmc/346496163 Control GMC specializes in designing and manufacturing fully automatic food packing machines and cup filling lines. Their versatile equipment is suitable for various food products, including sauces, cheeses, and salads, and can handle a wide range of cup, tub, and tray sizes and shapes. The company's innovative machines allow for quick changeovers and efficient operations, achieving high fill rates while ensuring high-quality packaging. Their intended clients include businesses in the food industry seeking reliable and efficient packaging solutions | Source: https://www.ransomware.live/id/Q29udHJvbEdNQ0B0aGVnZW50bGVtZW4=

thegentlemen: Einstein Technology

Ransomware attack attributed to thegentlemen. | Country: AU | Sector: Technology | Website: einstein-tech.com.au | Infostealer data confirmed. | einstein-tech.com.au zoominfo.com/c/einstein-technology-pty-ltd/372382819 Einstein Technology Pty Ltd is a company that operates in the Custom Software & IT Services industry. It employs 5to9 people and has 1Mto5M of revenue. The company is headquartered in Lysterfield, Victoria, Australia | Source: https://www.ransomware.live/id/RWluc3RlaW4gVGVjaG5vbG9neUB0aGVnZW50bGVtZW4=

thegentlemen: Docaret

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Business Services | Website: docaret.com | Infostealer data confirmed. | docaret.com zoominfo.com/c/docaret/363588396 For over 30 years, DOCARET has combined excellent technical writing and document management skills with a technical understanding of its customers' business sectors and the type of documentation they require. Our technical writers have a solid technical background and speak the same language as your engineers or technicians. Our translators and associates also have extensive experience in the sectors in which they work. We can also fulfill your requirements in the following areas; communications (brochures and booklets in 2D and 3D), development of digital models and logistic support (provision of technicians or engineers). Our goal is to build strong partnerships with our customers. This ensures efficiency and guarantees high quality and competitive service provisions. As managing director, my object...

thegentlemen: Sodimatel Fasteners

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Manufacturing | Website: sodimatel.eu | Infostealer data confirmed. | sodimatel.eu zoominfo.com/c/sodimatel-fasteners-sa/430245612 Sodimatel Fasteners provides business services. Contact them directly for more information about their offerings | Source: https://www.ransomware.live/id/U29kaW1hdGVsIEZhc3RlbmVyc0B0aGVnZW50bGVtZW4=

thegentlemen: Grupo San Jacinto

Ransomware attack attributed to thegentlemen. | Country: PE | Sector: Agriculture and Food Production | Website: sanjacinto.com.mx | Infostealer data confirmed. | sanjacinto.com.mx zoominfo.com/c/grupo-san-jacinto/430469681 Grupo San Jacinto started with a dream of making amazing dairy products that meet high customer expectations. Based in Aguascalientes, Mexico, the company has grown to serve markets across Mexico and the United States. They create delicious, high-quality dairy items that bring joy to families and food lovers everywhere | Source: https://www.ransomware.live/id/R3J1cG8gU2FuIEphY2ludG9AdGhlZ2VudGxlbWVu

thegentlemen: eDevice

Ransomware attack attributed to thegentlemen. | Country: FR | Sector: Technology | Website: edevice.com | Infostealer data confirmed. | edevice.com zoominfo.com/c/edevice-sa/12403021 With more than 650,000 connected patients served globally, eDevice is a leading provider of connected care platform solutions for the healthcare industry for over 15 years. The company is the chosen connectivity partner for Medical Devices companies such as Medtronic, Honeywell, Philips, and a technology provider for healthcare participants committed to delivering care virtually and remotely | Source: https://www.ransomware.live/id/ZURldmljZUB0aGVnZW50bGVtZW4=

thegentlemen: Nenplas

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Manufacturing | Website: nenplas.co.uk | Infostealer data confirmed. | nenplas.co.uk zoominfo.com/c/nenplas-ltd/1115375413 Nenplas is a leading UK manufacturer specializing in bespoke plastic extrusion products, offering a wide range of extruded and fabricated plastic profiles. With over 40 years of experience and more than 3,000 existing tools, they provide quick and efficient turnaround for various materials including PVC, ABS, and HDPE. Their services cater to diverse market sectors such as industrial, glazing systems, and furniture, ensuring high-quality design and development through in-house capabilities. Nenplas is committed to delivering reliable and innovative solutions to their national and international customer base | Source: https://www.ransomware.live/id/TmVucGxhc0B0aGVnZW50bGVtZW4=

thegentlemen: Kpropha

Ransomware attack attributed to thegentlemen. | Country: TN | Sector: Healthcare | Website: kpropha.com | Infostealer data confirmed. | kpropha.com zoominfo.com/c/kpropha/470472753 K.PROPHA specializes in the distribution of pharmaceutical and parapharmaceutical products, serving pharmacists, private clinics, and other health partners. The company is committed to ensuring optimal availability of healthcare products to facilitate quick access to the latest treatments for patients. With a multidisciplinary team, K.PROPHA offers services such as supply management, online sales, and real-time distribution tracking. Their mission is to exceed customer expectations and promote the best healthcare solutions | Source: https://www.ransomware.live/id/S3Byb3BoYUB0aGVnZW50bGVtZW4=

thegentlemen: Cosmesia

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Agriculture and Food Production | Website: nutritionprofess.com | Infostealer data confirmed. | nutritionprofess.com zoominfo.com/c/cosmesia/533652648 Nutrition Profess Public Company Limited is a leader in the production of dietary supplements and cosmetics under customer brands. They focus on planning and developing high-quality, distinctive products while providing friendly consulting services. The company aims to enhance health and well-being through innovative and effective products tailored to diverse client needs. Their commitment to quality and customer satisfaction drives their mission to promote better health | Source: https://www.ransomware.live/id/Q29zbWVzaWFAdGhlZ2VudGxlbWVu

thegentlemen: Nephrology Associates

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Healthcare | Website: nephkc.com | Infostealer data confirmed. | nephkc.com zoominfo.com/c/nephrology-associates/469726875 Nephrology Associates prides itself on providing the highest quality of care for patients with kidney disorders in the Kansas City area | Source: https://www.ransomware.live/id/TmVwaHJvbG9neSBBc3NvY2lhdGVzQHRoZWdlbnRsZW1lbg==

thegentlemen: Malia Group

Ransomware attack attributed to thegentlemen. | Country: LB | Sector: Manufacturing | Website: maliagroup.com | Infostealer data confirmed. | maliagroup.com zoominfo.com/c/malia-group/347685476 Malia Group is a multifaceted organization comprising 21 companies that operate across six sectors, including consumer goods distribution, technology solutions, fashion, engineering and contracting, and hospitality and real estate. With a strong presence in Lebanon, Iraq, and the UAE, the group is committed to excellence in the creation, production, and timely delivery of goods and services. Over the past 80 years, Malia Group has built a portfolio of 60 brands and established partnerships with 50 leading multinationals, making it a preferred choice in the region. The company promotes cultural and social diversity while fostering an environment of transparency, empowerment, and innovation among its employees | Source: https://www.ransomware.live/id/TWFsaWEgR3JvdXBAdGhlZ2VudGxlbWVu

thegentlemen: Gerleinco

Ransomware attack attributed to thegentlemen. | Country: CO | Sector: Transportation/Logistics | Website: gerleinco.com | Infostealer data confirmed. | gerleinco.com zoominfo.com/c/gerleinco-sa/430010238 Gerleinco is a leading logistics service provider in Colombia, established in 1916, specializing in container control, multimodal transport, and project logistics. The company offers reliable and dynamic services through innovative technological developments and a dedicated professional team. Gerleinco serves various clients in key ports and commercial cities across the country. Their commitment to effective logistics ensures fulfillment of client needs in a responsible manner | Source: https://www.ransomware.live/id/R2VybGVpbmNvQHRoZWdlbnRsZW1lbg==

thegentlemen: LAF Hotel Aree

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Hospitality and Tourism | LAF Hotel is a millennial-focused hotel located in Bangkok, Thailand, on Soi Phahol Yothin 5. Positioned as a place "to live and to have fun it offers affordable accommodation and is highly recommended by 94% of its reviewers based on 240 reviews. | Source: https://www.ransomware.live/id/TEFGIEhvdGVsIEFyZWVAdGhlZ2VudGxlbWVu

thegentlemen: Reanthong Partcenter

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Manufacturing | Website: rtvalve.com | Infostealer data confirmed. | rtvalve.com zoominfo.com/c/reanthong-partcenter-co-ltd/393312914 Reanthong Partcenter Co., Ltd. is a prominent manufacturer in Thailand specializing in LPG Cylinder Valves, Brass Fittings, and Gas Accessories with over 32 years of expertise. The company focuses on research and development, manufacturing, sales, and high-quality service, holding ISO9001 certification and various international approvals. Their RT valve products for LPG cylinders are known for their superb quality, competitive pricing, and impressive customer service. Reanthong Partcenter serves clients and customers worldwide, ensuring high standards in their offerings | Source: https://www.ransomware.live/id/UmVhbnRob25nIFBhcnRjZW50ZXJAdGhlZ2VudGxlbWVu

thegentlemen: Comtec 2000

Ransomware attack attributed to thegentlemen. | Country: RO | Sector: Manufacturing | Website: comtec-int.ro | Infostealer data confirmed. | comtec-int.ro zoominfo.com/c/comtec-2000-inc/459031613 COMTEC 2000 INC specializes in high-quality electrical products and professional equipment for industrial applications, catering to the needs of demanding clients. Their offerings include a wide range of electrical devices, lighting solutions, and photovoltaic systems, ensuring compliance with European standards. The company is committed to sustainability, implementing waste management and energy-efficient practices. With a focus on innovation, COMTEC provides advanced LED lighting and reliable telecommunications equipment to enhance modern infrastructure | Source: https://www.ransomware.live/id/Q29tdGVjIDIwMDBAdGhlZ2VudGxlbWVu

thegentlemen: Primus

Ransomware attack attributed to thegentlemen. | Country: TH | Sector: Consumer Services | Website: benzprimus.com | Infostealer data confirmed. | benzprimus.com is the official website of Primus Autohaus, a leading authorized Mercedes-Benz dealer in Thailand . They offer new and certified pre-owned vehicles, along with comprehensive after-sales services, and have won multiple awards for sales and service excellence | Source: https://www.ransomware.live/id/UHJpbXVzQHRoZWdlbnRsZW1lbg==

thegentlemen: CHS Villach

Ransomware attack attributed to thegentlemen. | Country: AT | Sector: Education | Website: chs-villach.at | Infostealer data confirmed. | chs-villach.at zoominfo.com/c/chs-villach/429687687 CHS Villach is an educational institution offering a variety of vocational training programs in fields such as business, health and social services, media design, and arts. The school focuses on developing students' personal and social skills, encouraging them to take responsibility and engage actively in their communities. It provides opportunities for hands-on learning through projects, internships, and collaborations, fostering independence and creativity among students. CHS Villach aims to prepare young individuals for successful careers while promoting quality education and personal growth | Press: https://www.kleinezeitung.at/kaernten/20630734/hackerangriff-auf-kaerntner-schule-daten-wurden-verschluesselt | Source: https://www.ransomware.live/id/Q0hTIFZpbGxhY2hAdGhlZ2VudGxlbWVu

thegentlemen: Special Shapes Refractory

Ransomware attack attributed to thegentlemen. | Country: US | Sector: Manufacturing | Website: ssrco.com | Infostealer data confirmed. | ssrco.com zoominfo.com/c/special-shapes-refractory-company-inc/1132759207 Special Shapes Refractory Company (SSRC) is a leader in providing high-quality precast shapes and monolithic materials primarily for the glass, steel, and other industrial manufacturers. They focus on minimizing downtime and enhancing equipment reliability through innovative solutions, efficient manufacturing processes, and a commitment to customer service. SSRC caters to a wide range of industrial clients, offering customized refractory solutions and quick lead times. With decades of experience, they emphasize the importance of using pure raw materials to ensure the best product quality and performance | Source: https://www.ransomware.live/id/U3BlY2lhbCBTaGFwZXMgUmVmcmFjdG9yeUB0aGVnZW50bGVtZW4=

thegentlemen: Ricopia

Ransomware attack attributed to thegentlemen. | Country: ES | Sector: Technology | Website: ricopia.com | Infostealer data confirmed. | ricopia.com zoominfo.com/c/ricopia/405953806 Ricopia helps businesses upgrade their technology and work smarter. With over 100 tech experts, they've been helping companies of all sizes get better at digital tools for more than 30 years. They do this by checking how a company works, finding ways to improve technology, and helping teams learn new skills. Big names like ING Direct and BNP Paribas trust Ricopia to make their businesses run more smoothly and efficiently | Source: https://www.ransomware.live/id/Umljb3BpYUB0aGVnZW50bGVtZW4=

thegentlemen: All India Minerals

Ransomware attack attributed to thegentlemen. | Country: IN | Sector: Agriculture and Food Production | Website: allindiaminerals.com | Infostealer data confirmed. | allindiaminerals.com zoominfo.com/c/all-india-minerals/470618608 All India Minerals is India's largest manufacturer of Washed Sand and Graded Silica Sand, established in 1969. The company employs advanced technologies and strict quality controls to produce high-quality silica sand for various industrial applications, including foundry core, molding, and glass industries. They operate a state-of-the-art mining and washing facility near Ankleshwar, ensuring excellent product quality through dedicated testing and processing. Committed to ecological improvement, All India Minerals focuses on maintaining a pollution-free environment while delivering superior products to meet customer needs | Source: https://www.ransomware.live/id/QWxsIEluZGlhIE1pbmVyYWxzQHRoZWdlbnRsZW1lbg==

thegentlemen: Afezo

Ransomware attack attributed to thegentlemen. | Country: NL | Sector: Construction | Website: afezo.nl | Infostealer data confirmed. | afezo.nl zoominfo.com/c/aannemingsmij-afezo-bv/372576926 Afezo B.V. is a family-owned company specializing in urban sewer work and infrastructure development in Amsterdam and the Zaanstreek. With decades of experience, they offer a comprehensive range of services including wastewater management, road construction, and the development of drinking water networks. Their commitment to sustainability and innovative practices drives their projects, which aim to enhance both the physical environment and the community. Afezo serves a diverse clientele, from small-scale to large-scale projects, contributing significantly to the infrastructure of Amsterdam | Source: https://www.ransomware.live/id/QWZlem9AdGhlZ2VudGxlbWVu

thegentlemen: Labtician Ophthalmics

Ransomware attack attributed to thegentlemen. | Country: CA | Sector: Healthcare | Website: labtician.com | Infostealer data confirmed. | labtician.com zoominfo.com/c/labtician-ophthalmics-inc/139985585 Labtician Ophthalmics specializes in manufacturing and selling advanced surgical and therapeutic ophthalmology products. The company aims to enhance patients' visual health by providing effective tools and solutions for various eye conditions. Their offerings cater primarily to eye care professionals and include extensive product catalogs and partnership opportunities. Labtician is committed to supporting both healthcare practitioners and their patients in managing, treating, and easing eye issues | Source: https://www.ransomware.live/id/TGFidGljaWFuIE9waHRoYWxtaWNzQHRoZWdlbnRsZW1lbg==

thegentlemen: BITS Business Information Technology Solutions

Ransomware attack attributed to thegentlemen. | Country: DE | Sector: Technology | Website: bits.com.tn | Infostealer data confirmed. | bits.com.tn zoominfo.com/c/bits-business-information-technology-solutions/462382490 Bits is a computer services company that helps businesses solve real technology challenges. Our team works closely with partners across the tech world to create smart solutions for everyday problems. We pride ourselves on our five-star support and quick response times, making sure every client gets the help they need quickly and effectively | Source: https://www.ransomware.live/id/QklUUyBCdXNpbmVzcyBJbmZvcm1hdGlvbiBUZWNobm9sb2d5IFNvbHV0aW9uc0B0aGVnZW50bGVtZW4=

thegentlemen: St Stephens International

Ransomware attack attributed to thegentlemen. | Country: GB | Sector: Business Services | https://www.zoominfo.com/c/st-stephens-international-school/1293733677 www.sis.edu St Stephens International School offers educational programs at its Bangkok and Khao Yai campuses, catering to a diverse student population. The school provides weekend schooling and various camps for groups, aiming to enhance the educational experience. It is associated with several organizations including Ocean Glass, Ocean Property, and Bandara Group. The institution focuses on fostering an international learning environment for its students | Source: https://www.ransomware.live/id/U3QgU3RlcGhlbnMgSW50ZXJuYXRpb25hbEB0aGVnZW50bGVtZW4=

thegentlemen: Suzhou Yike Kejian

Ransomware attack attributed to thegentlemen. | Country: CN | Sector: Manufacturing | Suzhou Yike Kejian Architectural Design Research Institute Co., Ltd. (Nanjing Branch) is a Chinese architectural design and research firm operating in the Residential Building Construction sector, classified under the Construction of Buildings industry. The company is registered in Nanjing, Jiangsu Province, and operates as a branch of the parent entity headquartered in Suzhou, Jiangsu. It is a small regional design institute serving the competitive Yangtze River Delta construction market, with professionally certified engineers on staff | Source: https://www.ransomware.live/id/U3V6aG91IFlpa2UgS2VqaWFuQHRoZWdlbnRsZW1lbg==

thegentlemen: Elundini

Ransomware attack attributed to thegentlemen. | Country: ZA | Sector: Public Sector | Website: elundini.gov.za | Infostealer data confirmed. | elundini.gov.za zoominfo.com/c/elundini/425741285 Elundini Local Municipality (ELM) is dedicated to nurturing the history and sustainable growth of its communities within the Joe Gqabi District of the Eastern Cape province. The municipality is recognized for its good governance, particularly in AG audits. ELM offers various services aimed at community development, including training interventions in fields such as environment, media, technical skills, and public administration. Its intended clients include local residents, businesses, and organizations seeking to invest and engage in community initiatives | Source: https://www.ransomware.live/id/RWx1bmRpbmlAdGhlZ2VudGxlbWVu