Skip to content
Ransomware

Asessippi Ski Resort listed on thegentlemen ransomware leak site

Canada-based Asessippi Ski Resort has been listed on the leak site of the threat actor known as thegentlemen.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: thegentlemen
  • Country: Canada
  • Sector: Hospitality
  • Announcement date: October 9, 2026

Asessippi Ski Resort, a hospitality provider based in Canada, has been listed on a leak site belonging to the threat actor known as thegentlemen. The listing, which appeared on October 9, 2026, follows a claim by the group that they successfully conducted a cyberattack against the organization.

The claimed attack by thegentlemen

According to the announcement made by the threat group, the cyberattack against Asessippi Ski Resort was carried out on October 6, 2026. The group has placed the organization's name among the various announcements on their dedicated leak site. Currently, public information regarding the specific operations and methods of the group known as thegentlemen remains limited.

Ransomware groups often utilize leak sites as a tool for double extortion. In such scenarios, threat actors do not only encrypt an organization's internal systems to disrupt operations but also steal sensitive data. The threat actor then threatens to release this information publicly if a ransom is not paid. This tactic places immense pressure on an organization by threatening its reputation and legal standing. While the motivation for this specific group appears to be financial gain, the exact details of their involvement in this incident remain unverified.

Data involved in the listing

Despite the listing on the leak site, the threat actor has not provided specific details regarding the nature of the stolen data. There are no screenshots or detailed descriptions provided on the site that clarify what information was targeted during the alleged breach. Furthermore, the group has not disclosed the total size of the data or the specific file count involved in the incident.

  • No data types were specified in the listing.

In many cases, when a breach occurs, the lack of immediate information from the attacker creates significant uncertainty for the targeted entity. Organizations often face a period of investigation to determine whether the data targeted includes sensitive personal identifiers, financial records, or proprietary business information.

About Asessippi Ski Resort

Asessippi Ski Resort is a private ski resort located in Inglis, Manitoba, Canada. Since its founding in 1998, it has grown to become the largest ski resort in the region. The facility provides a wide range of winter sports and outdoor activities, including skiing, snowboarding, and tubing. Beyond the winter season, the resort also hosts various events during the summer months.

Implications and organizational considerations

The potential exposure of data poses significant risks to both the organization and its stakeholders. Given that the institution handles data related to customers and employees, a confirmed leak could lead to the exposure of personal information. Under Canada's PIPEDA regulations, such an event may trigger specific data breach notification obligations for the organization.

If personal data is indeed compromised, it could potentially be utilized by malicious actors for identity theft or for conducting targeted phishing attacks against the resort's customers. Beyond the direct risks to individuals, the organization may face challenges regarding operational continuity and the management of its reputation.

For organizations operating within the hospitality sector, maintaining robust cybersecurity defenses is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for staff. Monitoring for unusual network activity and ensuring that all software is patched against known vulnerabilities are also essential components of a proactive security posture to mitigate the risk of such incidents.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories