RANSOMWARE VICTIMDUPLICATE CLAIM

Vexin Normand

cdc-vexin-normand.fr
THEGENTLEMEN📍 France (FR)📅 March 18, 2026
8
same group

Attack Intelligence

Vexin Normand was compromised in a ransomware attack attributed to THEGENTLEMEN in March 2026. The organization, operating in an undisclosed sector in France, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

cdc-vexin-normand.fr zoominfo.com/c/cdc-vexin-normandfr/1316064619 The Communauté de Communes du Vexin Normand offers a wide range of services including health care, public services, and cultural activities to support the local community. It focuses on various sectors such as health, education, mobility, and economic development, catering to residents and businesses in the Vexin Normand area. The community also promotes tourism and recreational activities, providing facilities like swimming pools, gyms, and libraries. Their initiatives aim to enhance the quality of life and foster a connected and sustainable environment for all inhabitants

Additional Details

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountryFrance (FR)
Attack DateMar 18, 2026
Domaincdc-vexin-normand.fr
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.