CERT24The Gentlemen ransomware operation exposed by internal data leakLoading data…
CERT24Threat Observatory
Period

The Gentlemen ransomware operation exposed by internal data leak

Check Point Research describes the leak of The Gentlemen RaaS operation’s internal Rocket database and chats, acknowledged on May 4, 2026. The leaked material contained information on accounts, affiliates, victims, tools, campaigns and payouts. The source links the group to extensive ransomware activity, access operations targeting Fortinet and Cisco edge devices, and active evaluation of several CVEs.

← Back to intelligence

The Gentlemen ransomware operation exposed by internal data leak

Check Point Research describes the leak of The Gentlemen RaaS operation’s internal Rocket database and chats, acknowledged on May 4, 2026. The leaked material contained information on accounts, affiliates, victims, tools, campaigns and payouts. The source links the group to extensive ransomware activity, access operations targeting Fortinet and Cisco edge devices, and active evaluation of several CVEs.