RANSOMWARE VICTIM

Triquim

THEGENTLEMEN📅 May 5, 2026
8
same group

Attack Intelligence

Triquim was compromised in a ransomware attack attributed to THEGENTLEMEN in May 2026. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

triquim.com.ar zoominfo.com/c/triquim-sa/430429498 TRIQUIM S.A. is an Argentine pharmaceutical manufacturer founded in 1980 and headquartered in Tortuguitas, Buenos Aires, that has dedicated over 40 years to the synthesis and supply of Active Pharmaceutical Ingredients (APIs) for human and veterinary use. The company operates as a CMO/CDMO partner, offering custom API development, contract manufacturing, regulatory services, containment, and analytical services to pharma clients worldwide. TRIQUIM holds certifications from Brazil's ANVISA and Mexico's COFEPRIS, and supplies clients across North America, Europe, and emerging markets with a portfolio of 16 pharmaceutical products including Benfotiamine, Bosentan, and Clonixinal

Other Victims — THEGENTLEMEN (8)

Quick Facts

Attack DateMay 5, 2026
Intel Sourceransomlook

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.