'Thegentlemen' Ransomware Claims Italian Lab Supplier

Ransomware group 'thegentlemen' listed Italian lab-equipment distributor Exacta + Optech Labcenter as a victim, with infostealer-compromised user credentials also detected.

Ransomware.live tracking data shows Exacta + Optech Labcenter S.p.A., an Italian distributor of laboratory instruments, chemicals and consumables serving pharma, food, oil & gas, environment, education and oenology markets, was listed as a victim by a ransomware group referred to as 'thegentlemen' (derived from the source identifier), with an estimated attack date of 2026-08-28 and discovery on 2026-08-30. The listing includes limited technical reconnaissance data rather than confirmation of a breach: HudsonRock infostealer telemetry shows two compromised user accounts associated with the victim's domain, alongside basic DNS/SPF records and one identified external attack surface element. No compromised employees, third-party credentials, or recognized cloud/SaaS services were detected in the scan.

The entry provides no indication of the ransomware strain used, no leak-site evidence, no confirmed data exfiltration, and no technical indicators beyond passive domain and infostealer-exposure data. This is consistent with a standard ransomware group victim-listing entry rather than a detailed incident report, offering minimal detection or mitigation value beyond general awareness that the organization has been named as a target and that some of its users have stealer-exposed credentials, which could facilitate initial access if not remediated.

Source reporting: https://www.ransomware.live/id/RXhhY3RhIE9wdGVjaCBMYWJjZW50ZXJAdGhlZ2VudGxlbWVu