Custom Rx Shoppe listed on thegentlemen ransomware leak site

• Ransomware group: thegentlemen
• Country: United States
• Sector: Healthcare
• Announcement date: September 30, 2026

The healthcare organization Custom Rx Shoppe has been listed on a leak site by the threat actor group known as thegentlemen. The announcement, which appeared on September 30, 2026, indicates that the group claims to have successfully infiltrated the organization's systems.

The claimed attack and event details

According to the announcement published by thegentlemen, the group claims to have gained unauthorized access to the systems of Custom Rx Shoppe. While the listing was made public on September 30, 2026, the threat actor claims the initial attack occurred on September 29, 2026. This timeline suggests a rapid progression from the initial breach to the public listing on the leak site.

Ransomware leak sites are a central component of modern cyber extortion tactics. In many cases, threat actors employ a strategy known as double extortion. In this scenario, attackers do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information. The threat actors then threaten to publish this stolen data on a public leak site if the ransom demands are not met. This tactic significantly increases the pressure on the victim organization, as the threat of a public data leak can lead to severe reputational damage and legal consequences.

The presence of an organization on such a site suggests that a cybersecurity incident may have occurred regarding the organization's operations. However, it is important to note that these listings represent the claims of the threat actors and do not constitute a confirmed forensic conclusion regarding the breach.

Information regarding the leaked data

At this time, there is no screenshot or detailed information available regarding the nature of the data allegedly leaked by the group. The listing does not specify the volume of data, the number of files involved, or the specific types of information that have been compromised.

The listing names no specific data types.

About Custom Rx Shoppe

Custom Rx Shoppe is an independent family-owned pharmacy based in Washington state. The company specializes in several key areas of pharmaceutical care, including retail pharmacy, long-term care services, and custom medication compounding. The organization serves the Whatcom, Skagit, and Island counties, providing integrated pharmacy services alongside home-care support.

Risk assessment and industry implications

This incident suggests that the organization may face the risk of exposure of patient and operational data. As the entity operates in the healthcare sector, a potential data breach could trigger legal processes under HIPAA regulations. Because the organization provides specialized services such as long-term care and custom medication compounding, a breach could have negative implications for both patients and business partners.

The unauthorized access to sensitive data may create secondary risks for patients, including identity theft or targeted phishing attacks. In the healthcare industry, the sensitivity of patient information makes organizations a high-value target for cybercriminals. When patient data is compromised, the impact extends beyond the immediate digital environment, potentially affecting the physical and financial security of the individuals served by the pharmacy.

While public information regarding the group thegentlemen is limited, the targeting of a specialized healthcare provider highlights the ongoing risks faced by the medical sector. Organizations in this sector can take various defensive steps to mitigate such risks, such as implementing robust access controls, maintaining regular backups, and ensuring continuous monitoring of their networks. Protecting the integrity of patient data is essential for maintaining the trust required in long-term care and specialized pharmacy services.