Dark Web Intelligence on X: " THE GENTLEMEN RANSOMWARE GROUP CLAIMS ...

X • November 11, 2026

The Gentlemen ransomware group has added Esri South Africa (esri-southafrica[.]com), the Midrand-based distributor of the ArcGIS mapping platform in southern Africa, to its leak site.

The listing gives no file count, data size or sample, and does not say what kind of records were taken.

Esri South Africa has not publicly confirmed an incident, and the claim has not been independently verified.

The company supports GIS work for government, utilities, mining and banking clients, so project and client files could be at stake if the claim holds. Treat this as an unverified threat-actor claim, NOT confirmation of a breach.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Gentlemen Ransomware Group Targets Esri South Africa The Gentlemen ransomware group has claimed responsibility for a breach involving Esri South Africa, a distributor of the ArcGIS mapping platform. The group has listed Esri South Africa on its leak site, although no specific details about the data taken have been provided, such as file counts or data size. Esri South Africa has not publicly confirmed any incident, and the claim remains unverified. The potential impact includes sensitive project and client files, as the company supports various sectors including government and banking. Security professionals are advised to treat this as an unverified threat-actor claim until further confirmation is available. 2 sources 34

Extracted Entities

Dark Web Intelligence on X: " THE GENTLEMEN RANSOMWARE GROUP CLAIMS ...

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

Industries (4)

Platforms (1)

Ransomware Groups (1)