Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-11T19:23:29Z•63743954823a033de982c0a0a61a8537458a9ad3d1ca354ada3e5265a322e79c
The Gentlemenaccount-takeoveraffiliatesai-social-engineeringaws-govcloudbotnetcanvascisacongressional-inquirycredential-leakcritical-vulnerabilitiesdata-exposuredata-extortionddoseducation-sectorinfrastructure-seizureinstagramkimwolfmetamicrosoftnetherlandspatch-tuesdaypublic-exploitransomwarerussian-influence-ops
What happened
June 2026 reporting highlights multiple high-impact incidents: a surge in activity by the ransomware group “The Gentlemen” (aggressive affiliate model, high victim count); Microsoft’s June Patch Tuesday fixing ~200 flaws (nearly three dozen rated critical and at least three with public exploit code); abuse of Meta’s AI support assistant to hijack Instagram accounts (including high-profile government accounts); a major CISA-related data leak after a contractor published AWS GovCloud keys and internal build/deploy files to a public GitHub repo, prompting congressional inquiries; Dutch law-enforc
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 63743954823a033de982c0a0a61a8537458a9ad3d1ca354ada3e5265a322e79c
- Enrichment time
- 2026-06-11T19:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.