MKG Kirchrode: The Gentlemen ransomware group claims attack on leak site
The Gentlemen ransomware group claims an attack on Hannover practice MKG Kirchrode; unconfirmed, so patients should watch for official notices.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- Not confirmed, the only evidence is a leak-site listing recorded by the RansomLook tracker
What happened
The Gentlemen ransomware group claims on its leak site that it attacked MKG Kirchrode (mkg-kirchrode.de), according to the claim tracker RansomLook. RansomLook recorded the post on 2026-11-03.
The group’s post describes the victim as an oral and maxillofacial surgery practice in Hannover-Kirchrode, Germany. The post also gives a figure of “900GB”, according to RansomLook. The post does not say what that figure refers to or what data it covers.
This is a claim by the group, not an established fact:
- MKG Kirchrode has not confirmed an incident in the sources available.
- No independent outlet has verified the claim.
- How the group says it got in, what data it says it holds, and whether any data has been published are all not confirmed.
RansomLook lists the group’s leak site and chat server as down, with 0% uptime over the last 30 days (RansomLook).
Am I affected?
Not confirmed. The sources do not say whether patient, staff or partner data is involved. If you are a patient, employee or business partner of MKG Kirchrode, it is unclear whether this concerns you until the practice makes a statement.
What to do now
The source does not give any guidance. These are general precautions:
- Watch for an official statement or notification from MKG Kirchrode, and rely on that rather than on the leak-site claim.
- Be careful with unexpected emails, calls or messages that mention the practice, especially ones that ask for payment or personal details.
- Do not search for or download any data the group may post.
- Check back for updates. This advisory will be revised if the practice or an independent source confirms or denies the claim.