-
Ultimate Metals
February 23, 2026
Ultimate Metals was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-02-23. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.ultimatemetals.com. https://www.tungsten-alloys.co.uk/Ultimate Metals is an international supplier of speciality materials to a variety of industries, which include aerospace and defence, engineering and electronic.We strive to respond to any request within 24 hours, priding ourselves on the professionalism of our team, which consists of technical sales people, metallurgists and engineers with years of experience.Personal information of employees and lientsFinancial documentsOther files https://www.ultimatemetals.com/
-
Asaniverko
April 13, 2026
•
[ ransomware, financial ]
Asaniverko was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Professional Services. Country: Belgium. Website: www.asaniverko.be. Asaniverko is a Belgian heating and cooling specialist based in Boom that provides professional installation, maintenance, and repair services for central heating systems and gas boilers. The company also specializes in sustainable energy solutions, including the installation of heat pumps and air conditioning units for residential and commercial properties.Personal information of employees and ClientsFinancial documentsOther files https://www.asaniverko.be/
-
Caja De Seguro Social
April 14, 2026
•
[ ransomware, government, healthcare ]
Caja De Seguro Social was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Government & Defense. Country: Panama. Website: www.css.org.pa. www.css.org.pa https://www.zoominfo.com/c/caja-de-seguro-social/455482072 www.css.gob.pa Caja de Seguro Social (CSS), the Panamanian Social Security Fund. The CSS is a public institution responsible for administering and governing the national social security and healthcare system in the Republic of Panama. Manages a network of hospitals and clinics nationwide, serving approximately 84% of Panama's population. 3TB of data, including pension, medical, and investment data.
As gentlemen, we offered to pay a fair price for the mistake made, after which all data would be permanently deleted from our servers. The management decided that their influence on public opinion is so strong that the incident will remain unnoticed, so we are forced to publish proof of the hack and put the medical and pension databases containing 80% of Panama's population up for sale as a single package for 2 BTC.
-
Hangzhou Industrial
April 14, 2026
Hangzhou Industrial was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Manufacturing. Country: China. Website: hztrust.com. hztrust.com zoominfo.com/c/hangzhou-industrial--commercial-trust-co-ltd/430077414 Hangzhou Industrial & Commercial Trust (hztrust.com) is a state-owned Chinese financial firm founded in 1986, headquartered in Hangzhou with offices in Shanghai and Beijing. It operates as a joint venture with Morgan Stanley, which holds a 19.9% equity stake (the legal maximum for foreign banks in China). The firm specializes in alternative asset management private equity, separate accounts, and joint ventures and as of 2014 managed over $4.8 billion AUM. Services include equity investment, M&A, asset restructuring, corporate finance, and financial advisory
-
Verzinkerei Rentrop
April 14, 2026
•
[ ransomware, manufacturing, leak ]
Verzinkerei Rentrop was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Manufacturing. Country: Germany. Website: verzinkerei-rentrop.de. verzinkerei-rentrop.de zoominfo.com/c/verzinkerei-rentrop-gmbh/1103509945 Verzinkerei Rentrop GmbH is a German industrial company founded in 1929 in Plettenberg, NRW, specializing in steel surface treatment primarily hot-dip galvanizing, electrogalvanizing, and phosphatizing. The company also produces steel products such as protective grids, fencing, sheets, and profiles. After filing for insolvency in 2019, its assets were sold to Verzinkerei
-
NSOFT
April 14, 2026
•
[ ransomware, technology, energy ]
NSOFT was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Country: India. Website: nsoft.in. nsoft.in zoominfo.com/c/nsoft-india-services-pvt-ltd/442822236 Founded in 1996 in Bangalore, NSOFT India Services is a leading utility automation and Smart Metering/AMI specialist, helping electricity, water, and gas utilities maximize revenue and reduce losses. The company serves over 16 million consumers across 11+ utilities in India, handling transactions worth more than 10,000 crores annually, with a team of 1,000+ employees. It is certified CMMI Level 5, ISO 9001, ISO 27001, and ISO 20000, founded and led by Dr. Naagaraj Subramanya (IIT/IISc).
-
BRC Biotechnology
April 14, 2026
•
[ ransomware, healthcare, manufacturing ]
BRC Biotechnology was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: United States of America. Website: brcbiotech.com. brcbiotech.com BRC Biotechnology is a biopharmaceutical contract development and manufacturing company that strictly adheres to GMP standards from China, the USA, and Europe. It holds certifications including EU GMP QP compliance, US FDA FEI registration, and ISO 9001:2015, offering professional risk assessments, customized biomanufacturing solutions, and welcoming regular client audits.
-
Double C Farm
April 14, 2026
Double C Farm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Agriculture and Food Production. Country: United States of America. Website: doublecfarm.net. doublecfarm.net zoominfo.com/c/double-c-farm-llc/356570449 Double C Farm is a private equestrian facility in Montgomery County, Maryland, near Sugarloaf Mountain, owned and operated by Cridder Halle. It features an Extreme Mountain Trail Obstacle Course with 30+ obstacles (bridges, balance beams, water obstacles, trenches) and offers Ranch Riding clinics, group/private lessons, and schooling shows for all skill levels approved by the East Coast Ranch Riding Association (ECRRA).
-
International Maritime Hospita
April 14, 2026
International Maritime Hospita was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: Ghana. Website: imah.gov.gh. imah.gov.gh zoominfo.com/c/international-maritime-hospital-imah/1339985496 IMaH (International Maritime Hospital) is a government-affiliated, world-class healthcare facility located in Tema, Ghana, operating 24/7 year-round including holidays. It specializes in maritime and general health services, offering a wide range of facilities including operating theatres, maternity wards, an oxygen plant, morgue, and emergency care. The hospital is ranked among the top ten hospitals in Ghana and actively participates in international medical tourism expos
-
Harlem Stage
April 14, 2026
•
[ ransomware, retail ]
Harlem Stage was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Retail & E-Commerce. Country: United States of America. Website: harlemstage.org. harlemstage.org zoominfo.com/c/harlem-stage/109888723 Founded in 1983, Harlem Stage is a New York-based performing arts organization dedicated to empowering artists of the Global Majority amplifying stories that have been whispered, silenced, or erased. Operating under the motto "Harlem is our home; the world is our stage," it supports dance, music, theater, film, and visual arts through commissions, festivals, education programs, and global partnerships.
-
Cleor
April 14, 2026
•
[ ransomware, retail ]
Cleor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Retail & E-Commerce. Country: France. Website: cleor.com. cleor.com zoominfo.com/c/cleor/355616744 CLEOR is a historic French jewelry brand with over 20 years of experience, offering jewelry, watches, and accessories for men, women, and children online and in stores across France. They control the full production chain from raw material sourcing to creative design and assembly with a focus on quality precious materials (18K gold, diamonds, pearls, gemstones) at fair prices
-
Brand Collective
April 14, 2026
•
[ ransomware, retail, manufacturing ]
Brand Collective was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Professional Services. Country: Australia. Website: brandcollective.com.au. brandcollective.com.au zoominfo.com/c/brand-collective-pty-ltd/366644163 Brand Collective is Australia's leading house of apparel, footwear, and sports brands. They manage owned and licensed brands across the full product lifecycle from strategy, design, and development to sales, supply chain, retail operations, e-commerce, and marketing.
-
GEM Terminal
April 14, 2026
•
[ ransomware, technology, manufacturing ]
GEM Terminal was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Country: Taiwan. Website: gem.com.tw. gem.com.tw zoominfo.com/c/gem-terminal-industry-co-ltd/46452181 Gem Terminal Ind. Co., Ltd. is engaged in the manufacture and sale of terminals used for electronic communication, automobile transportation and electrical plugs. The Company also offers ceramic ferrules, bushings and modules. During the year ended December 31, 2007, the Company obtained approximately 92% of its total revenue from terminals
-
Intra
April 14, 2026
•
[ ransomware, healthcare ]
Intra was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: New Zealand. Website: intracare.co.nz. intracare.co.nz zoominfo.com/c/intra-ltd/430152179 IntraCare is New Zealand's leading private centre of excellence for advanced image-guided medical diagnostics and interventions, founded in 1990 in Auckland. It specialises in three areas: Interventional Cardiology, Electrophysiology, and Interventional Radiology, with over 30 practising specialists treating more than 2,000 patients per year. The clinic operates from two locations Allevia Hospital Epsom and Southern Cross Hospital North Shore and is internationally recognized for pioneering procedures like TAVI, implanting the first device in the Asia-Pacific region in 2008
-
UK Electronics
April 14, 2026
UK Electronics was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: ukelectronics.co.uk. ukelectronics.co.uk zoominfo.com/c/uk-electronics-ltd/51921022 UK Electronics specializes in the manufacture of high-quality electronic assemblies, offering a comprehensive range of services including PCB assembly, mechanical assembly, and testing. With over 40 years of experience, they provide full turnkey solutions from concept to manufacture, catering to various industries such as military, aviation, medical, and manufacturing
-
PsychPlus
April 14, 2026
PsychPlus was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: United States of America. Website: psychplus.com. psychplus.com zoominfo.com/c/psychplus/1319245304 PsychPlus is a Houston-based mental health company founded in 20192020, offering virtual and in-person care via licensed psychiatrists and therapists. It focuses on accessibility by accepting 99% of commercial insurances (including Medicare/Medicaid), providing same/next-day appointments, and enabling 24/7 online booking through its app and EHR platform, with over 200 providers and plans to expand into 20 new U.S. markets in 2025
-
decaturdiagnosticlab.net
April 13, 2026
•
[ ransomware, healthcare ]
decaturdiagnosticlab.net was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Healthcare. Country: United States of America. Website: decaturdiagnosticlab.net. Located inside the Med-Surg Complex; Decatur Diagnostic Lab is a privately owned lab servicing the D...
-
marti.do
April 1, 2026
•
[ ransomware, manufacturing ]
marti.do was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Manufacturing. Country: Dominican Republic. Website: marti.do. ABOUT THE GROUP Somos un grupo empresarial con ms de 60 aos de experiencia, sirviendo con entusia...
-
nucleodediagnostico.mx
April 8, 2026
nucleodediagnostico.mx was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Healthcare. Country: Mexico. Website: nucleodediagnostico.mx. Ncleo de Diagnstico Ncleo de Diagnstico es un laboratorio de anlisis clnicos ubicado en Guada...
-
cegasa.com
April 7, 2026
cegasa.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-07. Sector: Manufacturing. Country: Spain. Website: cegasa.com. Cegasa is a leading European company specializing in innovative energy solutions, particularly lithi...
