RANSOMWARE VICTIMHEALTHCARE

DermaPharm

dermapharm.dk
THEGENTLEMEN📍 DK (DK)📅 May 8, 2026
8
same group

Attack Intelligence

DermaPharm was compromised in a ransomware attack attributed to THEGENTLEMEN in May 2026. The organization, operating in the Healthcare sector in DK, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

dermapharm.dk DermaPharm A/S is a 100% Danish-owned skincare company founded in 1980, specializing in mild, eco-certified, and allergy-friendly personal care products. Headquartered in Fårup, Denmark, they operate a 10,000 m production facility and serve as both a brand owner (Derma) and a full-service private label manufacturer for third parties The company is a market leader in Nordic suncare and a trusted partner of the Danish Cancer Society

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountryDK (DK)
SectorHealthcare
Attack DateMay 8, 2026
Domaindermapharm.dk
Intel Sourceransomlook

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.