$ intel.mask2.ca

ADVISORY · 2026-06-11 · SRC KREBS · HIGH
2026-06-11 high REL 7/10

The Gentlemen ransomware group identified as second most active by victim count

post-secondarygovernmenthealthcareenergyfinancemspgeneral

The Gentlemen has rapidly grown to become the second most prolific ransomware operation, using an unusually generous 90% affiliate commission structure to recruit skilled attackers. Security researchers have identified clues pointing toward the real-world identity of the group’s administrator.

Why it matters in Western Canada: Ransomware groups with aggressive recruitment and high victim counts pose significant threats to Canadian organizations across all sectors, particularly those in healthcare, energy, and public institutions that handle sensitive data.


Summary generated from the original advisory. Read the full source: krebs

Source
https://krebsonsecurity.com/2026/06/who-runs-the-ransomware-group-the-gentlemen/
CVEs
None listed
Tags
ransomware, the-gentlemen, threat-actor, recruitment, extortion
Provenance
mask2-ti-pipeline (AI-assisted, human-reviewable)