The Gentlemen Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.
ransomware 1,320 leak-site claims, all timeLatest observed leak-site post 2026-11-05
aka thegentlemen
Names and spellings merged by the site editor: the-gentlemen, thegentlemen.
PDF export is unavailable. The threat brief remains available below; use your browser's Print command.
PDF export is unavailable. The threat brief remains available below; use your browser's Print command.
Executive facts
Actor The Gentlemen
Kind ransomware
Aliases thegentlemen
Actor record created 2026-07-06
Latest observed 2026-11-05
Leak-site claims 1,320
Catalogued techniques 0 Scope
Tracked sectors Manufacturing, Technology, Healthcare, Construction & Engineering, Retail
Claim records 2025-09-09 to 2026-11-05 Vulnerability events linked to this group No dated vulnerability events are attached to this group's linked vulnerabilities.
Verified techniques No verified ATT&CK mapping for this group.
Defensive actions No defensive actions are attached to this profile.
Most-claimed sectors Manufacturing Technology Healthcare Construction & Engineering Retail
Activity window in this site's data
This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.
Claim records First observed 2025-09-09 Latest observed 2026-11-05 Claims posted under this group's name or leak-site brand 1320 Verified ATT&CK phases represented
No verified ATT&CK mapping for this group
Origin and motivation
Origin and motivation not attributed.
No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.
Claims posted under this group's name or leak-site brand
1320 on this site MKG Kirchrode Manufacturing 2026-11-05 source ↗ MKG Kirchrode Healthcare 2026-11-03 source ↗ Customs Support Transportation & Logistics 2026-11-02 source ↗ Mitsubishi Motors Ukraine Automotive 2026-11-02 source ↗ European Motorcars Automotive 2026-11-02 source ↗ MegChem Construction & Engineering 2026-11-02 source ↗ TransLogWest Transportation & Logistics 2026-11-02 source ↗ Neighborhood House Association Nonprofit 2026-11-02 source ↗ Airdrie Christian Academy Education 2026-11-02 source ↗ Academy of the Sacred Heart Education 2026-11-02 source ↗ View all on Breaches → Leak-site claim activity
Claims per month, 2025-09 to 2026-11. Peak 203 in 2026-08.
38 10 17 13 47 89 43 104 78 125 154 203 172 201 26
2025-09 2026-11
Show monthly counts as a table 0 additional claims without a disclosure date
Ransomware claim data is unverified: RansomLook (CC BY 4.0) and ransomware.live (Terms of use: credit and link required).