RANSOMWARE VICTIM

Gesvalt

THEGENTLEMEN📍 Spain (ES)📅 April 6, 2026
8
same group

Attack Intelligence

Gesvalt was compromised in a ransomware attack attributed to THEGENTLEMEN in April 2026. The organization, operating in an undisclosed sector in Spain, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

gesvalt.es zoominfo.com/c/gesvalt/429923714 Gesvalt is a leading Spanish real estate valuation and appraisal company serving both private individuals and businesses. It offers official property appraisals for mortgage guarantees, asset distribution, and general valuation purposes, with prices starting from €75 for garages and storage units, and €165 for residential properties — reports are valid for all Spanish banks. Beyond standard appraisals, the company also provides sustainability consulting services, including BREEAM certification and decarbonization roadmaps for commercial real estate and hotel portfolios

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountrySpain (ES)
Attack DateApr 6, 2026
Intel Sourceransomlook

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.