Who Runs the Ransomware Group ‘The Gentlemen?’

Summary

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.

SpinGraph analysis pending — check back after processing.

• CISA Admin Leaked AWS GovCloud Keys on Github
• Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
• Lawmakers Demand Answers as CISA Tries to Contain Data Leak
• Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
• Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
• A Record-Breaking Patch Tuesday for June 2026