Donacoop (VinaCapital) listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Vietnam
• Sector: Agriculture and Food Production
• Announcement date: October 26, 2025

The threat group known as thegentlemen has listed the Vietnamese conglomerate Donacoop (VinaCapital) on its dedicated leak site. The announcement, which appeared on the group's platform, indicates a potential data breach involving the organization.

The alleged attack and group claims

According to the announcement published by thegentlemen on October 26, 2025, the threat actors claim to have gained unauthorized access to the systems of Donacoop (VinaCapital). The group's listing serves as a public notification of the incident, a common tactic used by ransomware groups to pressure victims into meeting demands.

While the group has made this public announcement, the validity of their claims regarding the breach remains uncertain. In many modern cyberattacks, threat actors utilize leak sites to host information stolen during an intrusion. This practice often involves a double extortion strategy, where the attackers not only encrypt an organization's data but also threaten to release sensitive information to the public to increase leverage.

At this stage, the specific details regarding the nature of the unauthorized access or the timeline of the initial intrusion remain unconfirmed by the group's public post. However, the listing itself marks a significant escalation in the threat profile facing the organization.

Details regarding the leaked data

Regarding the content of the alleged breach, the threat group has not provided any specific details concerning the nature or the volume of the data involved. There is no information available regarding the specific files, the total size of the data, or the specific types of information that may have been compromised.

The listing names no specific data types. Furthermore, attempts to verify the claims through the group's platform encountered a verification error, as evidenced by a screenshot showing an error message when attempting to access the leak site content.

Organization profile

Donacoop is a major conglomerate based in the Dong Nai province of Vietnam. The company has its origins in agricultural and handicraft cooperatives. In its current operations, the organization engages in large-scale investments across several sectors, including real estate development and infrastructure projects. Additionally, the company is involved in metro line extensions, working in partnership with prominent entities such as VinaCapital and Keppel Land.

Risk assessment and industry implications

This incident may pose significant risks to Donacoop (VinaCapital) regarding both data privacy and operational continuity. Because the specific content of the leaked data remains unknown, the potential secondary risks to the organization's employees or customers—such as identity theft or targeted phishing attacks—cannot be determined at this stage.

The organization may also face legal obligations under the local data protection regulations in Vietnam. When a breach occurs, organizations are often required to notify regulatory bodies and affected individuals depending on the sensitivity of the data involved and the legal framework of the jurisdiction.

For organizations operating in the agriculture and food production sectors, such incidents highlight the importance of robust cybersecurity postures. Defensive measures typically include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular network segmentation to prevent lateral movement by attackers. Furthermore, continuous monitoring and incident response planning are essential to mitigate the impact of unauthorized access and ensure business continuity in the face of evolving cyber threats.