Find notable cyber news and cases, enriched with sources, timelines, and signals.

The Gentlemen internal back-end database leak sale

Data Leak
First reported
Last updated
Happening score
H score 25
1 unique sources, 1 articles

Summary

Hide ▲

On or just before May 4, 2026, the ransomware gang The Gentlemen suffered a breach of its internal back-end database, and attackers began selling more than 16GB of internal material. A 44MB proof sample was also leaked, making the offer more credible and raising the risk of operational exposure. The exposed material reportedly includes internal communications, tooling, and other data that could help outsiders map the gang's structure and methods.

Related Happenings

SimonMed Imaging patient data leak

Data Leak
First: 13.10.2025 23:12 Last: 13.10.2025 23:12 Sources 1

About this happening: **SimonMed Imaging** exposed patient and medical records after **attackers leaked sample files** tied to a January breach, increasing privacy and identity-theft risk for **more th...

MidCity Marketing stolen data leak after extortion attack

Data Leak
First: 16.09.2025 11:53 Last: 16.09.2025 11:53 Sources 1

About this happening: The **Yurei ransomware** group leaked **MidCity Marketing**'s stolen data after an **extortion attack**, confirming public exposure and increasing coercion risk. The victim is a *...

Timeline

  1. 13.05.2026 23:47 2 articles · 13d ago

    The Gentlemen internal database leak begins

    Initial Disclosure

    An anonymous group compromised The Gentlemen's internal back-end database and started selling just over 16GB of internal communications, tooling, and other data for $10,000 in Bitcoin, while also leaking a 44MB proof sample.

    Show sources
  2. 13.05.2026 23:47 1 articles · 13d ago

    Check Point analyzes The Gentlemen leak sample

    Technical Analysis Update

    Check Point Research analyzed the 44MB proof sample from The Gentlemen leak and said it exposed the gang's operational structure, TTPs, and internal roles; Eli Smadja characterized the breach as a reputational hit that was not expected to significantly disrupt operations.

    Show sources