RANSOMWARE VICTIM

Coralina

THEGENTLEMEN📍 Colombia (CO)📅 April 24, 2026
8
same group

Attack Intelligence

Coralina was compromised in a ransomware attack attributed to THEGENTLEMEN in April 2026. The organization, operating in an undisclosed sector in Colombia, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

coralina.gov.co zoominfo.com/c/coralina/425697881 CORALINA (Corporación para el Desarrollo Sostenible del Archipiélago de San Andrés, Providencia y Santa Catalina) is the official Colombian government environmental authority responsible for managing and protecting the natural resources of the San Andrés, Providencia, and Santa Catalina archipelago in the Caribbean. It was created under Article 37 of Law 99 of December 22, 1993 and operates as a public entity with administrative and financial autonomy, its own assets, and legal status

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountryColombia (CO)
Attack DateApr 24, 2026
Intel Sourceransomlook

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.