Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-12T13:23:33Z•e0ebbcf206f4a29558df2157f536914acbfd1d73d7c123b195ae6daaa430f0d1
account-takeoverai-support-botarrestsaws-govcloudbotnetcanvascisacredentials-leakdata-extortiondata-leakddoseducation-sector','anti-ddos'exploithosting-abuseinstagramkimwolfmetamicrosoftnetherlandspatch-tuesdayransomwarerussian-operationsthe-gentlemenvulnerabilitieszero-day
What happened
Multiple high-impact cyber incidents and developments were reported: a deep-dive into the identity and operations of the ransomware group “The Gentlemen,” now the second-most active gang by victim count; a record-breaking June 2026 Microsoft Patch Tuesday fixing nearly 200 vulnerabilities (dozens rated critical) with public exploit code available for at least three flaws; attackers abusing Meta’s AI support assistant to reset Instagram account passwords and briefly deface high-profile accounts; and a massive CISA-related data leak after a contractor exposed AWS GovCloud keys and internal build
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- e0ebbcf206f4a29558df2157f536914acbfd1d73d7c123b195ae6daaa430f0d1
- Enrichment time
- 2026-06-12T13:23:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.