Skip to content
Ransomware

Focus Design Partners listed on thegentlemen leak site

Focus Design Partners, an architecture and engineering firm, has been listed on the leak site of the threat group known as thegentlemen.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: thegentlemen
  • Country: Qatar
  • Sector: Professional Services
  • Announcement date: May 12, 2026

The architecture and engineering firm Focus Design Partners has been listed on the leak site belonging to the threat group known as thegentlemen. The announcement, which appeared on May 12, 2026, marks a potential data breach for the Qatar-based professional services organization.

The claims made by thegentlemen

The threat group thegentlemen has officially announced the listing of Focus Design Partners on their dedicated leak site. In their announcement, the group makes specific references to the firm's core business activities, specifically highlighting its involvement in the fields of architecture, engineering, and project management. While the group has taken responsibility for the listing, public information regarding the specific tactics, techniques, or procedures utilized by this particular group remains limited.

Ransomware groups often utilize leak sites as a tool for double extortion. In such scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also threaten to release sensitive information on public forums to pressure the victim into paying a ransom. These sites serve as a public scoreboard for cybercriminals, often used to damage the reputation of the target organization and increase the likelihood of a payout.

Details regarding the alleged data leak

Despite the listing on the leak site, the group has not provided specific details regarding the contents of the alleged breach. Currently, there is no information or screenshots available that describe the nature of the data that has been purportedly taken from the organization. Furthermore, the group has not disclosed the total size of the data or the specific number of files involved in the incident.

The listing names no specific data types that have been compromised. Without further evidence or a sample of the data, the exact scope of the information at risk remains unknown to the public.

About Focus Design Partners

Focus Design Partners is an international firm that specializes in the fields of architecture, engineering, and project management. The company has a significant portfolio of high-profile, iconic projects, including the Al Jannoub Stadium and the Lusail Circuit in Qatar. Beyond these landmarks, the firm provides sustainable design solutions across several critical sectors, including sports, healthcare, and infrastructure.

Potential impact and industry implications

Given the specialized position of Focus Design Partners within the architecture and engineering sector, the implications of a verified breach could be significant. If the claims made by thegentlemen are confirmed, sensitive data related to intellectual property and ongoing projects may be at risk. For a firm involved in large-scale infrastructure and sports projects, the loss of such data could potentially impact international operations and strategic partnerships.

Furthermore, depending on the specific nature of the data involved, the incident could trigger legal processes related to various data protection regulations. There is also a secondary risk that any leaked data could be utilized in subsequent malicious activities, such as targeted phishing campaigns or further attacks against the firm or its partners.

Organizations operating in high-stakes professional services sectors often face these types of threats. To mitigate such risks, it is common practice for firms to implement robust defensive measures. These include maintaining rigorous backup protocols, implementing multi-factor authentication across all systems, and conducting regular security awareness training for employees to recognize phishing attempts. Continuous monitoring of network traffic and maintaining a comprehensive incident response plan are also essential components of a modern cybersecurity posture designed to defend against the evolving tactics of ransomware groups.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories