Skip to content
Ransomware

ETA Technology Pvt listed on thegentlemen leak site

The threat actor group thegentlemen has listed ETA Technology Pvt on their leak site, claiming to have exfiltrated data from the organization.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: thegentlemen
  • Country: India
  • Sector: Technology
  • Announcement date: July 30, 2026

The threat actor group known as thegentlemen has listed ETA Technology Pvt on their dedicated leak site, claiming to have exfiltrated data from the organization. This announcement, which appeared on the group's platform, marks a new instance of a targeted cyberattack against a specialized manufacturing entity.

The claimed attack event

According to the announcement published by thegentlemen, the group targeted ETA Technology Pvt in an incident that allegedly occurred on July 29, 2026. The threat actors claim to have gained unauthorized access to the company's internal systems, which allowed them to exfiltrate sensitive information. This type of activity is characteristic of modern ransomware operations, where attackers often employ a double extortion tactic. In such scenarios, threat actors do not merely encrypt a victim's files to disrupt operations but also steal sensitive data to use as leverage during ransom negotiations.

The group's claim suggests a successful breach of the organizational perimeter, though the specific method of initial entry remains unconfirmed. Once inside a network, attackers typically move laterally to identify high-value assets and sensitive repositories. The announcement was officially made public on the group's dedicated leak site on July 30, 2026, shortly after the alleged breach took place.

Details regarding the exfiltrated data

Regarding the specific content of the alleged breach, the threat actor group has provided very little detail. Currently, there is no information or screenshot provided regarding the nature of the allegedly exfiltrated data. Furthermore, the group has not disclosed the total size of the data stolen or the specific number of files that were compromised during the operation. There is also no information available regarding a ransom demand or the specific circumstances of the negotiation.

Affected data types

The current listing names no specific data types that were allegedly stolen from the organization.

About ETA Technology Pvt

ETA Technology is an India-based manufacturing company founded in 1991. The organization specializes in the design and production of advanced welding and forging equipment intended for critical industries. Their product portfolio includes rotary friction welders, friction stir welding systems, and custom test rigs. The company serves high-stakes sectors such as automotive, aerospace, and e-mobility, providing specialized engineering solutions for complex industrial applications.

Potential implications and industry risks

Public information regarding the thegentlemen group remains limited, making it difficult to assess their specific tactics, techniques, and procedures. However, the implications for ETA Technology Pvt can be significant given their role in the manufacturing and engineering sector. Because the company provides specialized equipment for critical industries, it is possible that the leaked data may contain intellectual property or trade secrets. The loss of such sensitive information can undermine a company's competitive advantage and market position.

Beyond the immediate impact on the organization, this data breach could potentially create secondary risks for the organization's supply chain partners and clients. In modern industrial ecosystems, companies are deeply interconnected; a compromise in one part of the chain can lead to downstream vulnerabilities. Furthermore, if personal data of employees has been exposed, it may lead to identity theft or targeted phishing attacks against the workforce.

From a regulatory perspective, the organization could potentially face legal consequences under Indian data protection regulations. Organizations operating in highly technical sectors often implement defensive measures such as network segmentation, multi-factor authentication, and continuous monitoring to mitigate these risks. However, as seen in this incident, even specialized manufacturers remain targets for sophisticated threat actors seeking to exploit sensitive industrial data.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories