#The Gentlemen
This tag gathers reporting on campaigns, tactics, and findings linked to The Gentlemen across Latin America’s cybersecurity landscape. The archive helps readers track technical analysis, attribution, regional impact, and signs of how the threat evolves, with an emphasis on what it means for organizations and users in the region.
Mato Grosso Health Department Hit Again in 2026
Mato Grosso’s health department suffered a second cyber incident in 2026. Urgent care, emergency and hospital services kept running with limits.
Nov 5, 2026 · 2 min
Qilin and The Gentlemen Drive Manufacturing Victims Up
ReliaQuest reported a 70% rise in manufacturing victims on leak sites in Q3 2026, driven by Qilin and The Gentlemen.
Nov 5, 2026 · 2 min
Uruguay's Punta Shopping added to Emperador
Brandefense ATLAS logged Punta Shopping on Emperador’s leak site on Oct. 31, 2026, listing retail, leasing
Nov 5, 2026 · 2 min
Chile Hospital, Oldelval hit by ransomware
Entel Digital counted 338 critical infrastructure ransomware victims in Latin America, with confirmed incidents in Chile
Oct 26, 2026 · 36 min
Jujuy Judiciary exposed by Emperador ransomware
Emperador leaked WordPress databases and credentials from Jujuy’s judiciary. The operation is still active and has another confirmed victim.
Sep 10, 2026 · 3 min
Mexico, Brazil Face AI-Linked Intrusions
Unit 42 and other reports detail active campaigns in Mexico, Ecuador and Brazil using LLMs, NextChat and shared SOCKS5 relays.
Sep 8, 2026 · 5 min
Argentina: The Gentlemen hit critical sectors
Kaspersky attributed attacks on manufacturing, health, tech, finance, construction and logistics to The Gentlemen, with activity confirmed in Argentina.
Aug 21, 2026 · 3 min
The Gentlemen ransomware hits LATAM
The Gentlemen grew into a double-extortion RaaS in 2026, targeting LATAM with Fortinet, RDP, and attacks in Colombia, Peru
Aug 17, 2026 · 39 min
Argentina Among The Gentlemen’s Victims
Bitdefender’s August 2026 threat debrief placed Argentina among The Gentlemen’s victims as the ransomware group pushed deeper into manufacturing.
Aug 17, 2026 · 3 min
Argentina Led Ransomware Victims in July
Bitdefender logged 21 claimed ransomware victims in Argentina in July, with The Gentlemen, Qilin and DragonForce among active groups.
Aug 17, 2026 · 3 min
Peru: The Gentlemen Targets San Luis
The Gentlemen added Lima’s San Luis district to its leak site, while IntelFusions tracked more claims against South American entities.
Aug 13, 2026 · 2 min
Oldelval and Qilin drive Argentina ransomware
Oldelval reported a ransomware incident, blamed on The Gentlemen, while Qilin added victims in the same period.
Aug 12, 2026 · 2 min
Argentina in The Gentlemen’s sights
The Gentlemen hit SMBs across Latin America, including a victim in Argentina. The group abused edge devices and targeted manufacturing.
Aug 11, 2026 · 3 min
The Gentlemen Targets Edge Devices
The Gentlemen hit LATAM companies, with confirmed victims in Brazil and new reports pointing to edge device abuse.
Aug 11, 2026 · 2 min
Oldelval says ransomware incident is contained
Oldelval said it suffered a RaaS ransomware incident that was fully contained, and crude oil transport kept running.
Aug 7, 2026 · 1 min
Mexico Ranks Second in LATAM Ransomware Cases
Mexico ranks second in Latin America for ransomware victims, with more than 270 public cases by late July and services among the main targets.
Aug 5, 2026 · 4 min
Mercado Libre listed by The Gentlemen in July 2026
The Gentlemen listed Mercado Libre on its leak site in July 2026. Exfiltration signs emerged, but no public proof of operational impact.
Jul 20, 2026 · 38 min