RANSOMWARE VICTIMTRANSPORTATION/LOGISTICSDUPLICATE CLAIM

Terminal 21

terminal21.co.th
THEGENTLEMEN📍 Thailand (TH)📅 April 4, 2026
8
same group

Attack Intelligence

Terminal 21 was compromised in a ransomware attack attributed to THEGENTLEMEN in April 2026. The organization, operating in the Transportation/Logistics sector in Thailand, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

terminal21.co.th zoominfo.com/c/terminal-21/425950251 Terminal21 is a unique shopping complex that brings together the essence of global shopping experiences under one roof, catering to diverse lifestyles. The mall features a themed design inspired by famous shopping streets and landmarks from eight major cities around the world. With a focus on convenience and a wide variety of merchandise and food options, Terminal21 aims to provide an extraordinary shopping experience.

Additional Details

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountryThailand (TH)
SectorTransportation/Logistics
Attack DateApr 4, 2026
Domainterminal21.co.th
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.