All Rush listed on thegentlemen ransomware leak site

• Ransomware group: thegentlemen
• Country: Canada
• Sector: Professional Services
• Announcement date: December 24, 2025

Thegentlemen claims attack on All Rush

The threat actor known as thegentlemen has listed the Canadian organization All Rush on its ransomware leak site. The announcement, which appeared on December 24, 2025, claims that the group has successfully obtained data belonging to the organization. This development follows a common pattern in modern cyberattacks where threat actors utilize dedicated leak sites to pressure victims through public exposure.

In many ransomware campaigns, groups employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information. The threat of releasing this stolen data on a public platform serves as additional leverage to compel the victim into paying a ransom. While the listing on the leak site is a significant event, the specific details surrounding the breach remain unverified by external parties.

Currently, the public information regarding the specific methods, motivations, or technical capabilities of the thegentlemen group remains limited. The group's presence on the leak site is a direct claim of a successful operation against the target.

Details regarding the claimed data

Despite the listing on the leak site, there is currently no information available regarding the specific nature of the leaked or threatened data. The group has not disclosed the volume of files involved, the total size of the data, or the specific ransom demand required to prevent the release of information.

The listing names no specific data types. A technical verification error was encountered while attempting to access the group's leak site, and the provided screenshot only displays this error message rather than any evidence of stolen files. Consequently, the exact scope of the information at risk remains unknown.

About All Rush

All Rush is a full-service printing company based in Calgary, Canada. With over 20 years of experience in the industry, the organization specializes in a wide range of professional printing solutions. Their service portfolio includes custom apparel, large and small format signage, promotional products, and various corporate printing solutions.

Potential impact and organizational risks

The claim made against All Rush could lead to significant disruptions in the organization's operational processes and has the potential to damage customer trust. Because the company operates within Canada, a confirmed data breach could trigger legal obligations under the Personal Information Protection and Electronic Documents Act (PIPEDA).

Given that the organization provides specialized printing and promotional services, there is a risk that customer data and corporate trade information could be compromised. Such a breach often leads to secondary risks, including the potential use of leaked data for identity theft or highly targeted phishing attacks against the company's clients and partners.

In the professional services sector, maintaining robust cybersecurity postures is critical to mitigating these risks. Organizations often focus on several defensive strategies to protect against such threats, including:

• Implementing strict access controls and multi-factor authentication to prevent unauthorized entry.
• Maintaining regular, offline backups of critical business and customer data.
• Conducting regular security awareness training to help employees recognize phishing attempts.
• Monitoring network traffic for unusual patterns that might indicate data exfiltration.

As the scale of the threat against All Rush remains uncertain due to the lack of specific data from the threat actor, the organization faces an evolving situation regarding its data security and regulatory compliance.