Who Runs the Ransomware Group ‘The Gentlemen?’

2026-06-12T19:23:31Z8533dc4f72c0ca3931c69dd6cac1318dca369ed9972fcb17b988d396519e402d
ai-support-botaws_govcloudbotnetcanvascisadata-extortiondata-leakddosgithub-leakinstagram-account-takeoveriot-botnetkimwolflaw-enforcementmetamicrosoftnetherlandspatch_tuesdaypublic-exploitransomwareransomware-affiliatesrussian-operationsserver-seizurethe_gentlemenvulnerabilities

What happened

Multiple high-impact incidents reported across May–June 2026: a record Microsoft Patch Tuesday fixed nearly 200 vulnerabilities (dozens rated critical and at least three with public exploit code); a CISA contractor publicly leaked highly privileged AWS GovCloud keys and internal build/deploy secrets on GitHub, triggering congressional inquiries; the Canvas education platform suffered a large data-extortion attack threatening ~275 million student and faculty records and widespread disruption; attackers abused Meta’s AI support assistant to reset and seize Instagram accounts; a fast-growing RaaS

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
8533dc4f72c0ca3931c69dd6cac1318dca369ed9972fcb17b988d396519e402d
Enrichment time
2026-06-12T19:23:31Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Who Runs the Ransomware Group ‘The Gentlemen?’ · Baitaphish