RANSOMWARE VICTIMENERGYDUPLICATE CLAIM

PTT Philippines

pttphilippines.com
THEGENTLEMEN📍 PH (PH)📅 March 22, 2026
8
same group

Attack Intelligence

PTT Philippines was compromised in a ransomware attack attributed to THEGENTLEMEN in March 2026. The organization, operating in the Energy sector in PH, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

pttphilippines.com zoominfo.com/c/ptt-philippines-corp/353484173 PTT Philippines Corporation, a subsidiary of Thailand's PTT Oil and Retail Business Public Company Limited, specializes in the trading of petroleum products across retail, wholesale, and commercial markets. The company offers a range of high-performance fuels, lubricants, and services, aiming to enhance customer satisfaction and fuel efficiency. Targeting both individual consumers and businesses, PTT Philippines is committed to providing products of international standards while expanding its market presence in the Philippines. With a focus on innovation and quality, PTT Philippines also engages in corporate social responsibility initiatives to support local communities

Additional Details

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountryPH (PH)
SectorEnergy
Attack DateMar 22, 2026
Domainpttphilippines.com
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.