Azazel-managed exposed servers holding stolen victim data
Data Leak
Summary
Hide ▲
Show ▼
The exposure of two servers managed by Azazel left several terabytes of stolen victim data at risk of publication, spanning six countries and multiple sectors. The servers held material taken from logistics, insurance, pharmaceutical, AI, medical device, and government victims. Azazel also operated an independent leak site, Leakned, to publish victim data and keep extortion proceeds outside the ransomware program.
Related Happenings
Azazel's Leakned breakaway from The Gentlemen RaaS
Threat Actor Meta
H score82
First: 06.10.2026 11:30
Last: 06.10.2026 11:30
Sources 1
How related:
He built and operated his own independent leak site under the brand Leakned, publishing victim data and collecting extortion proceeds without routing them through the Gentlemen program, a betrayal of the RaaS operator running alongside the betrayal of victims.
About this happening:
Azazel broke away from The Gentlemen RaaS by running Leakned independently and keeping extortion proceeds, undermining the group's affiliate monetization model. The br...
Azazel's Leakned breakaway from The Gentlemen RaaS
Threat Actor MetaHow related: He built and operated his own independent leak site under the brand Leakned, publishing victim data and collecting extortion proceeds without routing them through the Gentlemen program, a betrayal of the RaaS operator running alongside the betrayal of victims.
About this happening: Azazel broke away from The Gentlemen RaaS by running Leakned independently and keeping extortion proceeds, undermining the group's affiliate monetization model. The br...
The Gentlemen RaaS split exposed by hastalamuerte
Threat Actor Meta
H score25
First: 19.03.2026 18:00
Last: 19.03.2026 18:00
Sources 1
About this happening:
hastalamuerte exposed the internal workings of The Gentlemen ransomware group, revealing a Qilin-related RaaS split that shows how affiliate-driven ecosystems can rapi...
The Gentlemen RaaS split exposed by hastalamuerte
Threat Actor MetaAbout this happening: hastalamuerte exposed the internal workings of The Gentlemen ransomware group, revealing a Qilin-related RaaS split that shows how affiliate-driven ecosystems can rapi...
Latest development: 17.07.2026 12:00
ReliaQuest reported that The Gentlemen ransomware gang became the most active ransomware group over a three-month period, with 300 incidents and 1,368 victim claims tracked across 11 ransomware groups. The analysis said The Gentlemen overtook Qilin, which had 289 incidents, and linked the rise to aggressive affiliate recruitment, a pre-packaged intrusion kit, and AI-accelerated development.
Timeline
-
05.10.2026 03:00 2 articles · 1d ago
Azazel-managed servers expose several terabytes of stolen victim data
Initial DisclosureCloudSEK said Azazel managed two exposed servers that held several terabytes of stolen data from logistics, insurance, pharmaceutical, AI, medical device, and government victims across six countries, while also running the independent leak site Leakned to publish victim data and keep extortion proceeds outside The Gentlemen program.
Show sources
- Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds — www.infosecurity-magazine.com — 06.10.2026 11:30
- Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds — www.infosecurity-magazine.com — 06.10.2026 11:30