Glassdoor listed on thegentlemen ransomware leak site

• Ransomware group: thegentlemen
• Country: United States
• Sector: Professional Services
• Announcement date: August 30, 2026

A claim of data leakage against Glassdoor

The threat group known as thegentlemen has claimed a data leak involving the Glassdoor platform. According to an announcement made on a leak site on August 30, 2026, the group alleges that they have successfully obtained data from the organization.

Ransomware groups often utilize leak sites to pressure victims through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive data to threaten its public release. By listing a company on a dedicated leak site, these groups aim to damage the victim's reputation and force compliance with ransom demands. While the presence of a listing indicates a claim of successful infiltration, it does not inherently confirm that a breach has occurred until the organization or a third-party investigator verifies the incident.

Details of the alleged incident

The group thegentlemen listed Glassdoor on their leak site, claiming an incident occurred on August 28, 2026. The group alleges that they have obtained data from the organization. Currently, information about this group remains limited, making it difficult to establish a clear pattern of operations or specific technical methodologies used during the alleged intrusion.

Regarding the specific information that has been targeted, the listing names no data types. No details or screenshots regarding the nature of the allegedly leaked data have been provided by the threat actors.

Potential implications and risks

If verified, this claim could lead to the exposure of anonymous reviews and salary data belonging to millions of Glassdoor users. The leakage of such data may result in the deanonymization of platform users and create risks for targeted phishing attacks. When sensitive user information is exposed, attackers often use it to craft highly convincing social engineering campaigns, leveraging personal details to gain trust and further access to other systems.

As a U.S.-based company, a potential data breach could trigger legal proceedings under state-level privacy laws and federal regulations. Furthermore, given its ownership by Recruit Holdings/Indeed, the incident may pose secondary risks regarding corporate supply chain security. In modern digital ecosystems, a breach at a major service provider can create ripple effects throughout the supply chain, potentially impacting the security posture of connected partners and parent organizations.

About Glassdoor

Glassdoor is a global job and career platform where employees anonymously review companies, salaries, and interview processes. Operating under Recruit Holdings, the company provides an extensive database and job listing services for job seekers.

Defensive considerations for professional services

For organizations operating within the professional services sector, maintaining robust security frameworks is essential to protect sensitive user data and corporate integrity. Organizations can take several proactive steps to mitigate the risks associated with data breaches and ransomware attacks.

Implementing a zero-trust architecture can help ensure that users and devices are continuously verified, limiting the lateral movement of an attacker within a network. Additionally, strong encryption for data at rest and in transit is vital for protecting the privacy of user reviews and sensitive financial information. Regular security audits and vulnerability assessments allow companies to identify and remediate weaknesses before they can be exploited by threat actors like thegentlemen.

Furthermore, comprehensive incident response plans and regular tabletop exercises prepare organizations to react effectively to claims of data leakage. Strengthening supply chain security through rigorous third-party risk management is also critical, especially for large entities like Glassdoor that are integrated into broader corporate ecosystems. By focusing on these defensive layers, companies can better protect their users and reduce the likelihood of successful extortion attempts.