The Gentlemen ransomware group has recently added three Australian organisations to its leak site, with the claimed victims operating across three very different industries.
The organisations listed by the group are:
- Epic Health – Healthcare – epichealth.com.au
- Mann Group – manngroup.com.au
- CBH Group – Agriculture – cbh.com
The listings highlight the broad range of Australian organisations appearing on ransomware leak sites, with no single industry appearing to be the exclusive focus of the group.
The Gentlemen operates a double-extortion model, where attackers seek to steal sensitive information and potentially encrypt victim systems. Threatening to publish stolen information provides additional leverage when attempting to pressure organisations into paying a ransom.
The claims should be treated as unverified until independently confirmed. A listing on a ransomware group’s leak site does not, by itself, establish the extent of an intrusion, whether data was successfully exfiltrated, or whether business operations were disrupted.
Nevertheless, the three listings serve as another reminder that organisations across Australia’s healthcare, commercial and agricultural sectors remain potential targets for financially motivated cybercriminal groups.
