DARKEYE.io
// Intel report News

New ransomware group on the scene: The Gentlemen

The Gentlemen, a new ransomware group, launched on 09/09/2025, linked to 32 attacks across multiple sectors worldwide, highlighting the growing global threat.

Published 1 min read
New ransomware group on the scene: The Gentlemen
On this page

New ransomware group on the scene: The Gentlemen

On 09/09/2025, the emergence of a new cybercriminal group called The Gentlemen was recorded, making a strong entrance into the ransomware ecosystem.

On their very first day of public activity, they have already been linked to 32 attacks, according to the platform breach.house.

This range of victims shows that The Gentlemen are not limited to any single sector: they have impacted education, healthcare, research, industry, retail, construction, and finance, with a reach spanning the Americas, Europe, Africa, and Asia.

🔒 Prevention, proactive monitoring, and team awareness remain our strongest defenses against these types of threats.

For full details of the attacks, visit: 📌 The Gentlemen

// HaveIBeenRansom Is your domain in a ransomware leak? Search leaked files by domain, email or company name. // Breach.House API Get this data through the API Victims, leak status and captures, as a feed for your SOC.
Share //

Spotted an error, or represent an organisation named here? Send us a correction and we will add it to the post. Read how we work in our methodology.

Darkeye Research Team

Tracking ransomware crews, breach disclosures and the tooling that matters — field notes from the Darkeye research desk.

Discussion (0)

Comments are open to signed-in members of the Darkeye community.

// Intel briefing

Ransomware and breach intel, before it trends

Two reports a week from the Darkeye research desk: one ransomware operation and one data breach. Signal only.

By subscribing you agree to the privacy policy. Unsubscribe in one click.