RANSOMWARE VICTIM

Worralls

worrall.co.nz
THEGENTLEMEN📍 NZ (NZ)📅 May 6, 2026
8
same group

Attack Intelligence

Worralls was compromised in a ransomware attack attributed to THEGENTLEMEN in May 2026. The organization, operating in an undisclosed sector in NZ, was added to the group's data leak site as part of an extortion campaign.

THEGENTLEMEN operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

worrall.co.nz W.H. Worrall & Co. Limited (Worralls) is New Zealand's leading distributor of world-class cycling and sporting brands, with roots going back to the early 1900s when it was founded by W.H. Worrall in Auckland. Today, the company is headquartered at 12 Hugo Johnston Drive, Penrose, Auckland, and remains a family-linked business formally registered since May 27, 1988. Worralls distributes an impressive portfolio of premium brands including Bell Helmets, Campagnolo, SRAM, Continental, Rock Shox, Cane Creek, Blackburn, San Marco, and Tacx, catering to both professional cyclists and recreational riders. The company has historically been a pioneer in the NZ cycling market — it was among the first to have Japanese manufacturers produce bicycles to English specifications

Other Victims — THEGENTLEMEN (8)

Quick Facts

CountryNZ (NZ)
Attack DateMay 6, 2026
Domainworrall.co.nz
Intel Sourceransomlook

Threat Group

THEGENTLEMEN
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.