# Tikona Infinet compromised by thegentlemen ransomware gang

Published: 2026-07-23 · Severity: high · Sectors: telecommunications, infrastructure
Canonical: https://vorant.io/reports/7a444cfe-a9c7-5fd4-b5d8-4318c7e7fafd/tikona-infinet-compromised-by-thegentlemen-ransomware-gang

> Tikona Infinet suffered a data breach with credentials stolen; thegentlemen ransomware gang claims responsibility.

Tikona Infinet, an Indian broadband and connectivity provider, has been compromised and claimed as a victim by the thegentlemen ransomware operation. The breach resulted in the compromise of multiple employee accounts and credentials. According to the reporting, 10 employees were directly compromised, over 20,000 user credentials were exfiltrated, and 20 third-party employee credentials were stolen. The attacker also identified 105 external attack surface points on the victim's infrastructure. This follows the common pattern of data exfiltration campaigns where threat actors steal credentials and sensitive data before deploying ransomware or selling access. The incident highlights the ongoing threat to telecommunications and connectivity providers, which are frequent targets due to their critical infrastructure role and access to customer data.

## Mentioned in this report

- Threat actors: The Gentlemen
- Malware: Gentlemen

Source reporting: https://www.ransomware.live/id/VGlrb25hIEluZmluZXRAdGhlZ2VudGxlbWVu

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/7a444cfe-a9c7-5fd4-b5d8-4318c7e7fafd/tikona-infinet-compromised-by-thegentlemen-ransomware-gang.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup