Thegentlemen is a financially motivated ransomware group that emerged in early June 2026, engaging in double extortion by encrypting victim networks and exfiltrating sensitive data. The group is characterized by its aggressive and non-negotiating tactics, as observed in specific incidents where threats were made instead of engaging in ransom negotiations. Their operations span diverse global industries, demonstrating a broad targeting approach.

This profile is generated from the same canonical actor-card record used by the Threat Actor Cards directory, so aliases, targeting fields, activity notes, and source links stay aligned as the database is enriched.