RANSOMWARE VICTIMBUSINESS SERVICES

Arabian Procession Holding

aph.com.sa
THEGENTLEMEN📍 SA (SA)📅 June 1, 2026
8
same group

Attack Intelligence

Arabian Procession Holding was compromised in a ransomware attack attributed to THEGENTLEMEN in June 2026. The organization, operating in the Business Services sector in SA, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

aph.com.sa zoominfo.com/c/arabian-procession-holding/483326397 Established in 1989, Arabian Procession Holding (APH) is a prominent family-owned investment firm based in Riyadh, Saudi Arabia, managing a diversified portfolio across the aviation, real estate, contracting, and retail sectors. Over the past three decades, the company has expanded its strategic footprint, notably operating duty-free shops in Saudi international airports through high-profile joint ventures. Driven by a commitment to sustainable growth, APH continues to develop local and global brands, delivering exceptional value to businesses and consumers alike

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountrySA (SA)
SectorBusiness Services
Attack DateJun 1, 2026
Domainaph.com.sa
Intel Sourceransomlook

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.