Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-12T19:23:31Z•8533dc4f72c0ca3931c69dd6cac1318dca369ed9972fcb17b988d396519e402d
ai-support-botaws_govcloudbotnetcanvascisadata-extortiondata-leakddosgithub-leakinstagram-account-takeoveriot-botnetkimwolflaw-enforcementmetamicrosoftnetherlandspatch_tuesdaypublic-exploitransomwareransomware-affiliatesrussian-operationsserver-seizurethe_gentlemenvulnerabilities
What happened
Multiple high-impact incidents reported across May–June 2026: a record Microsoft Patch Tuesday fixed nearly 200 vulnerabilities (dozens rated critical and at least three with public exploit code); a CISA contractor publicly leaked highly privileged AWS GovCloud keys and internal build/deploy secrets on GitHub, triggering congressional inquiries; the Canvas education platform suffered a large data-extortion attack threatening ~275 million student and faculty records and widespread disruption; attackers abused Meta’s AI support assistant to reset and seize Instagram accounts; a fast-growing RaaS
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 8533dc4f72c0ca3931c69dd6cac1318dca369ed9972fcb17b988d396519e402d
- Enrichment time
- 2026-06-12T19:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.