RANSOMWARE VICTIMFINANCIAL SERVICESDUPLICATE CLAIM

Autofinanciera

www.autofinanciera.com.co
THEGENTLEMEN📍 Colombia (CO)📅 January 20, 2026
8
same group

Attack Intelligence

Autofinanciera was compromised in a ransomware attack attributed to THEGENTLEMEN in January 2026. The organization, operating in the Financial Services sector in Colombia, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

www.autofinanciera.com.co https://www.zoominfo.com/c/autofinanciera/474531250 Autofinanciera offers a unique program for purchasing goods and services without bank interest, featuring flexible terms and fixed payments. The company aims to help clients achieve their dreams by providing a structured savings plan that allows for the acquisition of vehicles, education, travel, and home renovations. Their target clients include individuals looking to invest in their future and fulfill personal goals through a planned savings approach. Autofinanciera emphasizes financial tranquility and the development of good financial habits for its customers.

Additional Details

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountryColombia (CO)
SectorFinancial Services
Attack DateJan 20, 2026
Domainwww.autofinanciera.com.co
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.