ttt.vn TTT Corporation
May 5, 2026
•[ ransomware, manufacturing, government ]
ttt.vn TTT Corporation was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-05. Country: Vietnam. Website: ttt.vn. $900k to Solve the Problem 5TB While TTT Company was preoccupied with designing luxurious interiors and architectural masterpieces, they completely overlooked the design of a secure network. We have spent enough time within their internal infrastructure to conclude that their security is incredibly fragile. We have successfully exfiltrated all of the company's data and now possess 5 TB of the most sensitive information, including complete blueprints and CAD designs for prestigious clients (Toyota showrooms, gyms, luxury resorts, and government projects). We have accessed every employee's personal drive, including IDs, passports, and private medical records. Furthermore, we hold confidential contracts, tax reports (BCTC), internal financial audits, and detailed security schematics for client buildings.
Farmers Association of Iceland
May 3, 2026
•[ ransomware, manufacturing ]
Farmers Association of Iceland was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Iceland. Website: bondi.is. bondi.is Farmers Association of Iceland, is Iceland's primary agricultural interest organization representing approximately 3,000 people employed in farming and agriculture-related jobs across the country. The association acts as the official advocate for Icelandic farmers in public forums, protecting their interests in matters of policy, economics, and sustainability, while also developing climate action roadmaps for sustainable farm management. Headquartered in Borgartn 25 in Reykjavk, B publishes agricultural statistics, supports farm productivity improvement, and bridges the gap between society and food producers
La Kaffa International
May 3, 2026
•[ ransomware, retail ]
La Kaffa International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Italy. Website: lakaffagroup.com. lakaffagroup.com zoominfo.com/c/la-kaffa-international-co-ltd/426003975 La Kaffa International is a publicly listed Taiwanese multinational food and beverage group (Taiwan Stock Exchange, code: 2732), founded in 2004 and headquartered in Zhubei City, Hsinchu County, Taiwan, with over 663 employees and annual revenues around $46 million. The company is best known as the parent brand of Chatime the world-famous bubble tea chain expanded to 50+ countries across 6 continents, making it the top takeout tea brand in Australia, Southeast Asia, and beyond. Beyond Chatime, La Kaffa manages a multi-brand portfolio of 9+ F&B concepts including ZenQ Dessert, Bake Code Bakery, ChunSun Cake, La Kaffa Cafe, Wagokoro Tonkatsu, and Osaka Ohsho Taiwan, with over 1,100 outlets in China alone
Diviso Grupo Financiero
April 29, 2026
•[ ransomware, finance ]
Diviso Grupo Financiero was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Financial Services. Country: Peru. Website: diviso.pe. diviso.pe zoominfo.com/c/diviso-grupo-financiero-sa/372139811 Diviso Grupo Financiero S.A. is a Lima-based financial holding company founded in 2003 (formerly NCF Inversiones SA, rebranded in November 2013). With around 1,0005,000 employees and led by CEO Jos Romero Tapia, it offers a comprehensive portfolio of capital market services through its two main subsidiaries DIVISO Fondos (mutual and investment funds) and DIVISO Bolsa (stock brokerage). The group holds strategic stakes in major regional exchanges, including the Lima Stock Exchange (BVL), CAVALI, and the Chilean Products Exchange. It is publicly traded on the Lima Stock Exchange under ticker DIVIC1 with a market cap of ~313 million PEN
Marutake
May 3, 2026
•[ ransomware, healthcare, technology ]
Marutake was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Japan. Website: kk-marutake.co.jp. kk-marutake.co.jp zoominfo.com/c/marutake/561552308 Marutake Co., Ltd. is a comprehensive pharmaceutical and medical wholesale company founded on June 15, 1925, and headquartered in Niigata City, Japan, with a 100-year history of connecting manufacturers to healthcare providers across the region. The company distributes prescription pharmaceuticals, medical devices, clinical diagnostic reagents, hygiene materials, nursing care products, and healthcare IT systems to hospitals, clinics, and pharmacies, primarily across Niigata, Yamagata, Miyagi, Akita, Tokyo, and Gunma prefectures. With a workforce of 477 employees and capital of 100 million, Marutake positions itself as a "supporter of the medical frontline," ensuring stable supply of essential medical commodities to local communities
Kasapreko
May 3, 2026
•[ ransomware, manufacturing ]
Kasapreko was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Ghana. Website: kasapreko.com. kasapreko.com zoominfo.com/c/kasapreko-company-ltd/113558803 Kasapreko PLC is Ghana's leading herbal beverage manufacturer, founded in 1989 by Dr. Kwabena Adjei in a garage in Nungua, Accra, and today grown into a multinational company with over 500 employees, 100+ product SKUs, and exports to 16 countries worldwide. The company pioneered the first scientifically formulated herbal-based alcoholic beverage in Ghana Alomo Bitters which became its flagship product and was named by CNN Money as one of the top 5 emerging brands in the world in 2013. ISO 22000:2005 certified and a member of the prestigious Ghana Club 100, Kasapreko produces bitters, whisky, gin, liqueur, brandy, wine, soft drinks, and water, with active expansion into East Africa including Kenya
Levante Living
May 3, 2026
•[ ransomware, healthcare, retail ]
Levante Living was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Retail & E-Commerce. Country: Italy. Website: levanteliving.com. levanteliving.com zoominfo.com/c/levante-living-lp/388951109 Levante Living is a Canadian-owned senior living enterprise founded in 2016 by Michael Petersen and Jim MacDonald, and headquartered in Toronto, Ontario, focused on acquiring, managing, and redeveloping senior housing across North America. The company currently operates 24 retirement residences across Ontario, employs over 600 team members, and manages approximately 1,600 investors with over $175 million in senior living assets. Its service offerings span the full care spectrum independent living, assisted living, memory care, respite care, and long-term care guided by the values of dignity, compassion, integrity, and excellence
Ontario Physiotherapy Association
May 3, 2026
•[ ransomware, healthcare ]
Ontario Physiotherapy Association was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Healthcare. Country: Canada. Website: opa.on.ca. opa.on.ca zoominfo.com/c/ontario-physiotherapy-association/130548231 The Ontario Physiotherapy Association (OPA) is a non-profit, physiotherapist-led professional association representing over 5,500 physiotherapists, physiotherapist assistants (PTAs), and students across Ontario, Canada. Its core mission is to provide leadership, advocacy, professional development, and career support to ensure accessible, high-quality physiotherapy services throughout the province. Founded over 60 years ago, OPA has a well-documented history of advocacy wins from expanding PT scopes of practice to supporting virtual care access and removing referral requirements from physicians
East
May 3, 2026
•[ ransomware, technology, retail ]
East was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Country: Japan. Website: east-inc.jp. east-inc.jp zoominfo.com/c/east/5000054099 East Inc. is a Japanese company headquartered in Tokyo that provides comprehensive outsourcing services for commercial facilities shopping malls, outlet parks, and office complexes covering everything from day-to-day operations to system development, website management, and information services. The company has an impressive track record of over 800 commercial facilities nationwide across Japan, with clients including Roppongi Hills, Nihonbashi Takashimaya S.C., Mitsui Outlet Parks, and Ebisu Garden Place. Since 2007, East Inc. has also been supporting Japanese companies expanding into China, offering systems and operational know-how for overseas operations
The Modern Flour Mill
May 3, 2026
•[ ransomware, manufacturing, leak ]
The Modern Flour Mill was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Website: modernflourmills.com. modernflourmills.com zoominfo.com/c/the-modern-flour-mills-and-macaroni-factories-co/425333381 Modern Flour Mills & Macaroni Factories Co. (MFM) is a diversified cereal processor founded in 1949 and headquartered in Amman, Jordan, with a workforce of 201500 employees. The company operates four main production plants wheat flour milling, pasta, snack foods, and bakery ingredients and notably opened the first pasta factory in the entire Middle East in 1967. Its products are sold under well-known regional brands: Al-Ghazal (flour & pasta), Suprema/Barakeh (pasta), MFM (specialty flour & baking mixes), and Samar (snacks), with co-packing and private labeling available for export markets
Keretapi Tanah
May 3, 2026
•[ ransomware, leak ]
Keretapi Tanah was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Transportation. Country: Malaysia. Website: ktmb.com.my. ktmb.com.my zoominfo.com/c/keretapi-tanah-melayu-berhad/21365008 KTMB (Keretapi Tanah Melayu Berhad) is Malaysia's largest and oldest railway company, with a rail network spanning 1,699 km across Peninsular Malaysia, extending into Singapore and Thailand. It operates multiple services including KTM Komuter (urban commuter trains since 1995), ETS electric intercity trains, and diesel-powered KTM Intercity trains. The company was privatized in 1992 and today offers online ticketing via its website and mobile app, with a QR-code boarding system
Media Consulting
May 3, 2026
•[ ransomware, technology ]
Media Consulting was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: Italy. Website: mconweb.it. mconweb.it zoominfo.com/c/media-consulting-srl/372633129 Media Consulting is an Italian web agency based in Cesena that designs and develops custom responsive websites. They offer a full range of digital services including Social Media Marketing, Web Marketing (Google Ads, Email Marketing, Analytics), and graphic design. The agency also provides web marketing training for teams and assists businesses in accessing public funding grants
Arcelik
May 1, 2026
•[ ransomware, manufacturing, technology ]
Arcelik was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Manufacturing. Country: Turkey. https://www.zoominfo.com/c/arelik-global/462472631 Stock Symbol
ARCLK Revenue $11.8 Billion Arcelik Global is a Turkish multinational household appliances manufacturer headquartered in Istanbul, Turkey. Founded in 1955 as a subsidiary of Koc Holding, the company has grown into a worldwide producer and marketer of consumer durables and consumer electronics. The company operates 46 production facilities across 14 countries. With approximately 55,000 employees globally, Arcelik maintains subsidiaries in 58 countries and provides goods and services in over 145 countries. 22 brands including Arcelik, Beko, Grundig, Blomberg, Arctic, Defy, Dawlance, Hotpoint, Indesit, Leisure, Singer, Voltas Beko, and ElektraBregenz.Confluence: 7,736 spaces, 16,371+ pages, 10,313+ attachments, with full technical documentation, internal rules, marketing, engineering specs, R&D results, quality manuals, and project docs across business units. Jira: 10,419 projects - ETC. Access broker - ADAPTAVIST LTD. Thanks
Kınık Gross
April 29, 2026
•[ ransomware, retail ]
Knk Gross was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: Turkey. Website: kinikgross.com. kinikgross.com Knk Gross Toptan Market is the first and only local wholesale market in the Thrace (Trakya) region of Turkey, located in orlu. It offers a wide range of products including fresh produce, meat, deli, legumes, cleaning supplies, and personal care items all at competitive wholesale prices
Magisterial Service
April 29, 2026
•[ ransomware, government, leak ]
Magisterial Service was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: Papua New Guinea. Website: magisterialservices.gov.pg. magisterialservices.gov.pg The Magisterial Service of Papua New Guinea (MS) is the administrative arm of the country's District Court system, established in 1975 under Section 173(1) of the PNG Constitution. It oversees the effective and efficient administration of 63 District Court establishments and over 400 gazetted court-holding locations across the country. Headquartered in Port Moresby, the service is led by the Chief Magistrate and operates under the Ministry of Justice and Attorney General. Its budget for 2025 was projected at K109 million, reflecting the government's commitment to improving access to justice nationwide
Forsheda Stlverktyg
April 29, 2026
•[ ransomware, manufacturing, leak ]
Forsheda Stlverktyg was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Manufacturing. Country: Sweden. Website: stalverktyg.com. stalverktyg.com zoominfo.com/c/forsheda-stlverktyg-ab/345814836 Forsheda Stalverktyg AB is a Swedish industrial company founded in 1961 by Sigfrid Johansson, based in Forsheda, Sweden. For over 60 years, it has developed, manufactured, and serviced high-quality injection molding tools for the plastics, rubber, and metal industries. The company manages the full tool lifecycle from product idea and manufacturing to repair and modification and is certified to ISO 9001:2015 and ISO 14001:2015. It employs 1150 people and collaborates with international suppliers in Asia
Fabritius
April 29, 2026
•[ ransomware, manufacturing ]
Fabritius was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Manufacturing. Country: Belgium. Website: fabritius.be. fabritius.be ETS Fabritius SPRL is a Belgian family-owned company founded in 1976, with roots going back to 1945. For over 50 years, it has manufactured and sold temperature measurement equipment including thermocouples, resistance thermometers, converters, regulators, and connectors. The business has been passed down through three generations of the Fabritius family, combining deep product expertise with a commitment to quality and flexible customer service
ACFA Regionale de Calgary
April 27, 2026
•[ ransomware, government ]
ACFA Regionale de Calgary was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Professional Services. Country: Canada. Website: acfa.ab.ca. acfa.ab.ca zoominfo.com/c/acfa-regionale-de-calgary/354494275 The ACFA (French Canadian Association of Alberta) was founded in 1926 and serves as the official political spokesperson for all French-speaking people in Alberta. Its core mission is to protect francophone linguistic rights, advance French-language education, and strengthen the cultural vitality of Alberta's Francophone communities across 13+ regional branches. The non-profit is headquartered in Edmonton and employs between 1150 people. It is currently approaching its 100th anniversary, with the board actively planning centennial celebrations
Beaconhouse School System
April 27, 2026
•[ ransomware, leak, education ]
Beaconhouse School System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Education. Country: Pakistan. Website: beaconhouse.net. beaconhouse.net zoominfo.com/c/beaconhouse-school-system/351460008 Beaconhouse was founded in November 1975 in Lahore, Pakistan, as the modest Les Anges Montessori Academy with just 19 toddlers. Today it has grown into a global network with over 380,000 students across 8 countries, including Pakistan, the UK, Malaysia, the Philippines, UAE, Oman, Belgium, and Thailand. The group employs more than 18,000 staff from around the world and encompasses everything from early childhood education to university-level institutions such as Beaconhouse National University and Concordia Colleges. In 1996, it became the first private school network in the world to receive financing from the World Bank's International Finance Corporation
IT Management
April 27, 2026
•[ ransomware, technology ]
IT Management was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Technology. Country: Thailand. Website: itmanagement.co.th. itmanagement.co.th zoominfo.com/c/it-management-co-ltd/446178193 IT Management Co., Ltd. is a small local IT company based in Bangkok, Thailand, located at 562 Dindaeng Road, Din Daeng district. The company specializes in network intelligence and IT infrastructure solutions, assembling teams capable of handling a full range of networking functions. It appears to be a boutique-sized local business with a modest online presence
