RANSOMWARE VICTIMTRANSPORTATION/LOGISTICS

Metro Mondego

THEGENTLEMEN📍 Portugal (PT)📅 July 16, 2026
8
same group

Attack Intelligence

Metro Mondego was compromised in a ransomware attack attributed to THEGENTLEMEN in July 2026. The organization, operating in the Transportation/Logistics sector in Portugal, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

metromondego.pt zoominfo.com/c/metro-mondego-sa/430685182 public transport company responsible for sustainable mobility in the Coimbra, Miranda do Corvo, and Lousã region of Portugal. Originally conceived as a light rail network, the project has been restructured into a fully electric, high-capacity Bus Rapid Transit system known as Metrobus. The network spans 42 kilometers with 42 dedicated stations and 35 electric buses, designed to provide efficient, eco-friendly, and integrated urban transportation for an estimated 13 million passengers annually

Additional Details

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountryPortugal (PT)
SectorTransportation/Logistics
Attack DateJul 16, 2026
Intel Sourceransomlook

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.