Tapon Corona
Attack Intelligence
Tapon Corona was compromised in a ransomware attack attributed to THEGENTLEMEN in April 2026. The organization, operating in the Manufacturing sector in Mexico, was added to the group's data leak site as part of an extortion campaign.
THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
taponcorona.com.mx Tapon Corona S.A. de C.V. is a Mexican manufacturer based in Azcapotzalco, Mexico City, specializing in world-class crown caps (metal bottle caps) for beer and soft drink brands. The company is part of Grupo Zapata and operates alongside subsidiaries producing aluminum cans (Jalisco) and PET packaging (CDMX).