Dolidol listed on thegentlemen ransomware leak site

• Ransomware group: thegentlemen
• Country: Morocco
• Sector: Manufacturing
• Announcement date: September 9, 2025

Thegentlemen claims to have breached Dolidol

The Morocco-based manufacturing company Dolidol has been listed on the leak site of the threat actor known as thegentlemen. According to an announcement made on September 9, 2025, the group claims to have successfully gained access to data belonging to the organization.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms through a tactic known as double extortion. In such scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also exfiltrate sensitive data. The threat of releasing this stolen information publicly serves as additional leverage to ensure the victim complies with the group's demands. While the listing on a leak site is a significant indicator of a potential breach, it is important to note that these claims are made by the threat actors themselves.

Details regarding the claimed attack

The group known as thegentlemen listed the entity Dolidol on their leak platform on September 9, 2025. The group claims to have gained access to data belonging to the organization. However, the current state of the evidence remains inconclusive due to technical issues with the group's own platform.

Regarding the specific contents of the breach, there is no information available regarding the nature of the leaked data. The screenshot provided by the group displays a verification error, which means there is no detailed evidence available to confirm the nature or the volume of the data involved. Consequently, the listing names no specific data types.

About Dolidol

Established in 1972, Dolidol is one of the oldest mattress manufacturers in Morocco. The company manufactures and sells polyurethane foam, mattresses, sofas, and non-woven textiles. With a wide distribution network, the firm operates through numerous stores and distribution facilities across the country.

Potential risks and organizational impact

This situation may pose a risk to the organization's operational processes. The exposure of data could potentially have negative impacts on the organization's commercial reputation. Furthermore, given the data protection obligations under Moroccan law, the organization may face legal proceedings. If employee or customer data has been leaked, secondary risks such as identity theft or targeted phishing attacks may arise for the affected parties.

In the manufacturing sector, such incidents can disrupt supply chains and manufacturing schedules. Organizations in this sector often focus on securing industrial control systems and protecting intellectual property related to product designs and manufacturing processes. Common defensive steps for organizations facing such threats include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for employees to prevent initial access via phishing.

Public information about the group known as thegentlemen is currently limited, making it difficult to determine their specific motivations or long-term patterns of operation. As with any reported breach, the full extent of the impact will only be clear once a thorough investigation is conducted by the affected organization and relevant authorities.