CiberLATAMbywhalemate

#The Gentlemen

This tag gathers reporting on campaigns, tactics, and findings linked to The Gentlemen across Latin America’s cybersecurity landscape. The archive helps readers track technical analysis, attribution, regional impact, and signs of how the threat evolves, with an emphasis on what it means for organizations and users in the region.

Argentina: The Gentlemen hit critical sectors

Kaspersky attributed attacks on manufacturing, health, tech, finance, construction and logistics to The Gentlemen, with activity confirmed in Argentina.

Aug 21, 2026 · 3 min

The Gentlemen ransomware hits LATAM

The Gentlemen grew into a double-extortion RaaS in 2026, targeting LATAM with Fortinet, RDP, and attacks in Colombia, Peru

Aug 17, 2026 · 39 min

Argentina Among The Gentlemen’s Victims

Bitdefender’s August 2026 threat debrief placed Argentina among The Gentlemen’s victims as the ransomware group pushed deeper into manufacturing.

Aug 17, 2026 · 3 min

Argentina Led Ransomware Victims in July

Bitdefender logged 21 claimed ransomware victims in Argentina in July, with The Gentlemen, Qilin and DragonForce among active groups.

Aug 17, 2026 · 3 min

Peru: The Gentlemen Targets San Luis

The Gentlemen added Lima’s San Luis district to its leak site, while IntelFusions tracked more claims against South American entities.

Aug 13, 2026 · 2 min

Oldelval and Qilin drive Argentina ransomware

Oldelval reported a ransomware incident, blamed on The Gentlemen, while Qilin added victims in the same period.

Aug 12, 2026 · 2 min

Argentina in The Gentlemen’s sights

The Gentlemen hit SMBs across Latin America, including a victim in Argentina. The group abused edge devices and targeted manufacturing.

Aug 11, 2026 · 3 min

The Gentlemen Targets Edge Devices

The Gentlemen hit LATAM companies, with confirmed victims in Brazil and new reports pointing to edge device abuse.

Aug 11, 2026 · 2 min

Oldelval says ransomware incident is contained

Oldelval said it suffered a RaaS ransomware incident that was fully contained, and crude oil transport kept running.

Aug 7, 2026 · 1 min

Mexico Ranks Second in LATAM Ransomware Cases

Mexico ranks second in Latin America for ransomware victims, with more than 270 public cases by late July and services among the main targets.

Aug 5, 2026 · 4 min

Mercado Libre listed by The Gentlemen in July 2026

The Gentlemen listed Mercado Libre on its leak site in July 2026. Exfiltration signs emerged, but no public proof of operational impact.

Jul 20, 2026 · 38 min