Complexul Energetic Oltenia listed on thegentlemen ransomware leak site

• Ransomware group: thegentlemen
• Country: Romania
• Sector: Energy & Utilities
• Announcement date: January 6, 2026

Romanian energy company targeted by thegentlemen

The Romanian energy production company Complexul Energetic Oltenia has been listed on the leak site of the ransomware group known as thegentlemen. According to an announcement made on January 6, 2026, the group claims to have successfully obtained data belonging to the institution.

Details of the claimed attack

The ransomware group thegentlemen published the listing for Complexul Energetic Oltenia on their dedicated leak platform. The announcement was officially created on January 6, 2026, which coincides with the date the group claims the attack occurred. This type of activity is characteristic of modern ransomware operations, where threat actors often employ double extortion tactics. In such scenarios, attackers not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive information to use as leverage during ransom negotiations.

While the group has made this public claim, there are currently no details or sample files provided regarding the specific nature of the data allegedly leaked. Furthermore, the group has not provided information regarding the volume of the data or the specific file count involved. It is also noted that a screenshot associated with the incident shows a verification error encountered while attempting to access the group's leak site, which may complicate the verification of their claims.

The target organization

Complexul Energetic Oltenia is a Romanian energy production company. The organization operates within the field of electricity generation and supply, utilizing lignite mining and thermal power plants to fulfill its operational requirements.

Risk assessment and sector implications

This incident involves claims by the thegentlemen group that they have gained access to the operational data of Complexul Energetic Oltenia. Such a situation may pose a significant risk to the security of critical infrastructure systems within the energy sector. Because the institution is based in Romania, a confirmation of the leak could trigger legal processes under the General Data Protection Regulation (GDPR).

The potential exposure of employee data or commercial information could lead to reputational damage and secondary attack risks for the institution. In the broader context of cybersecurity, attacks on energy providers are particularly concerning due to the essential nature of the services provided to the public. Organizations in this sector typically focus on robust defensive measures to mitigate such risks, including network segmentation, continuous monitoring of industrial control systems, and rigorous access controls to protect both operational and administrative data.

At this time, information regarding the thegentlemen group remains limited. As with any reported breach, the situation remains unverified, and the actual impact on the organization's infrastructure and data integrity remains to be determined.