VULNpocalypse
LowBreach / campaignMonitoring

Grupo Lorrio claimed by The Gentlemen ransomware group on its leak site

The Gentlemen ransomware group claims Grupo Lorrio on its leak site, per RansomLook. It is unconfirmed, so contacts should watch for an official notice.

Published
Exploitation
No, the only evidence is a leak-site claim relayed by a tracker and there is no confirmed intrusion

What happened

According to the ransomware tracker RansomLook, the ransomware group The Gentlemen listed Grupo Lorrio on its leak site. RansomLook dates the listing 2026-11-02.

A leak-site listing is the group’s own claim. It is not proof of an attack. The sources do not confirm the following:

  • Grupo Lorrio has not confirmed an incident in any source provided.
  • No independent outlet has verified the claim. The only source is a claim tracker.
  • What data, if any, was taken is not confirmed.
  • The volume of data is not confirmed.
  • The entry point is not confirmed.
  • Whether systems were encrypted is not confirmed.
  • The company’s sector and country are not confirmed by the sources.

Am I affected?

Not confirmed. The sources do not say which customers, partners, employees or systems, if any, are involved. If you have no relationship with Grupo Lorrio, this listing has no known impact on you.

What to do now

  1. If you are a customer, supplier or employee of Grupo Lorrio, watch for an official statement or notification from the company.
  2. Be cautious with unexpected emails, calls or invoices that mention this claim or ask you to change payment details. This is general precaution, not something the sources report.
  3. Do not download or share any data the group may publish.

Sources