Excellentiam listed on thegentlemen ransomware leak site

• Ransomware group: thegentlemen
• Country: Colombia
• Sector: Professional Services
• Announcement date: March 18, 2026

The professional services organization Excellentiam has been listed on the leak site of the threat actor group known as thegentlemen. The group claims to have successfully targeted the company and obtained data belonging to the organization, according to an announcement made on their dedicated platform.

Details of the claim

The threat actor group known as thegentlemen announced the listing of Excellentiam on their leak site on March 18, 2026. This announcement serves as a public claim by the group that they have gained unauthorized access to the organization's systems and have acquired sensitive information. The announcement is currently hosted on the group's leak platform, which is a common tactic used by ransomware groups to pressure victims into paying ransoms.

Ransomware leak sites function as a public shaming mechanism. In many modern cyberattacks, threat actors utilize a method known as double extortion. In a double extortion scenario, the attackers do not merely encrypt the victim's data to disrupt operations; they also exfiltrate sensitive information before the encryption occurs. The threat actors then threaten to publish this stolen data on these public leak sites if the ransom demands are not met. This tactic significantly increases the pressure on an organization, as the threat of a data leak can cause irreparable reputational and legal damage.

Information regarding the alleged data breach

At this stage, there is no detailed information regarding the nature of the data allegedly leaked by the group. The group has not provided specifics concerning the types of files, the volume of the data, or the specific systems that were compromised. Furthermore, no ransom demand has been made public in the current listing. While a screenshot was provided as part of the announcement, it displays a technical error message encountered while attempting to access the group's leak site, rather than showing the actual stolen content.

Affected data types

The listing names no specific data types that have been stolen.

About Excellentiam

Excellentiam is a company based in Colombia that operates within the professional services sector. The organization provides a variety of specialized business solutions, including Business Process Outsourcing (BPO) and Know Your Customer (KYC) processes. Their service portfolio is designed to optimize business operations through several key functions, such as identity validation, electronic signature management, and document management. Additionally, they offer various consulting services and IT support to assist their clients in managing complex business workflows.

Potential impact and organizational risks

Given that Excellentiam manages highly sensitive processes such as BPO and KYC, a potential breach could put customer identity data and operational information at risk. Because KYC processes involve the collection and verification of sensitive personal identification information, any unauthorized access to this data could increase the risk of identity theft and fraud for the organization's clients. Such incidents often lead to significant challenges regarding reputation management and the restoration of client trust.

Furthermore, the organization may face legal sanctions regarding compliance with data protection regulations in Colombia. Organizations handling sensitive personal data are subject to strict regulatory frameworks, and a failure to protect that data can result in heavy fines and legal scrutiny. In the event of a double extortion attempt, the negative impacts on the organization's operational continuity may be observed, as the threat of public disclosure can disrupt business-as-usual operations.

To defend against such threats, organizations in the professional services sector often implement defensive strategies such as multi-factor authentication, robust encryption for data at rest and in transit, and continuous monitoring of network traffic to detect anomalous behavior. Maintaining a comprehensive incident response plan and conducting regular data protection audits are also essential steps for mitigating the impact of potential cyberattacks and ensuring compliance with regional data protection laws.