Who Runs the Ransomware Group ‘The Gentlemen?’

2026-06-16T07:23:29Za53e95055476bdea9b4ee118eaef0717b84c6f6107188c591019053685b267f1
AWS GovCloudCISAai-abusebotnetcanvascredentials-exposuredata-extortiondata-leakddoseducation-breachinstagramkimwolflaw-enforcementmetamicrosoft-patch-tuesdaynetherlandspatch-managementpublic-exploit-coderansomwaresocial-engineering

What happened

This collection of KrebsOnSecurity items describes multiple high-impact cyber incidents and trends in May–June 2026: a record Microsoft Patch Tuesday with nearly 200 fixes (including dozens rated critical and at least three flaws with public exploit code); a major CISA-related data leak in which a contractor published AWS GovCloud keys and internal build/deploy documentation to GitHub; social-engineered Instagram account takeovers leveraging Meta’s AI support bot; the emergence and rapid growth of the ransomware group “The Gentlemen” (aggressive affiliate recruitment offering ~90% payouts); a大

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
a53e95055476bdea9b4ee118eaef0717b84c6f6107188c591019053685b267f1
Enrichment time
2026-06-16T07:23:29Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.