Gelarti listed on thegentlemen ransomware leak site

• Ransomware group: thegentlemen
• Country: Peru
• Announcement date: September 15, 2026

The Peruvian gourmet ice cream chain Gelarti has been listed on a leak site associated with the ransomware group known as thegentlemen. The group has published an announcement claiming to have successfully compromised data belonging to the organization, marking a potential significant security incident for the company.

The claimed attack and details

According to the announcement discovered on September 15, 2026, the group thegentlemen asserts that it has gained unauthorized access to the digital assets of Gelarti. The group claims that the actual attack occurred on September 14, 2026, one day prior to the listing being identified on their platform.

Ransomware groups often utilize leak sites to exert pressure on their victims. In many modern cyberattacks, groups employ a tactic known as double extortion, where they not only encrypt an organization's systems to disrupt operations but also steal sensitive data. By threatening to publish this stolen information on public leak sites, the attackers aim to increase the likelihood of receiving a ransom payment through the threat of reputational damage and regulatory scrutiny.

At this stage, the group has not provided any specific details or screenshots regarding the nature of the allegedly compromised data. There is no information available regarding the volume of files involved or the specific types of data that were accessed during the unauthorized entry.

The organization

Gelarti is a leading gourmet ice cream parlor chain operating in Peru. Managed under Franquicias Unidas del Perú S.A.C., the company offers a variety of products including ice cream, desserts, and coffee products. The company maintains a significant presence in the region, operating through numerous locations situated within shopping malls.

Potential risks and implications

This incident may pose a risk of exposing the organization's customer and operational data. Given the company's extensive operations within Peru, potential non-compliance with local data protection regulations may be observed following the breach. If personal data of customers is compromised, such information could be utilized for identity theft or targeted phishing attacks against the affected individuals.

Furthermore, the breach could have broader consequences for the organization's business relationships. Potential impacts on the organization's supply chain and B2B partnerships may create risks regarding operational continuity. Maintaining the integrity of these business connections is vital for the ongoing stability of a retail chain with numerous physical locations.

General defensive considerations

While specific details about the group thegentlemen remain limited in public information, such incidents highlight the importance of robust cybersecurity frameworks. Organizations in the retail and food service sectors often focus on several defensive layers to mitigate these risks:

• Data protection and encryption: Implementing strong encryption for data at rest and in transit can help protect sensitive information even if unauthorized access occurs.
• Access controls: Enforcing the principle of least privilege ensures that users and systems only have access to the data necessary for their specific roles.
• Network monitoring: Continuous monitoring of network traffic can help detect unusual patterns that might indicate an ongoing unauthorized intrusion.
• Regular backups: Maintaining secure, offline, or immutable backups is a critical component of a recovery strategy against ransomware.

The current situation regarding Gelarti remains an ongoing matter as the claims made by the ransomware group are evaluated against the organization's actual security status.