Skip to content
Ransomware

ICET Studios listed on thegentlemen ransomware leak site

Italy-based ICET Studios has been listed on the leak site of the ransomware group known as thegentlemen.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: thegentlemen
  • Country: Italy
  • Sector: Retail & E-Commerce
  • Announcement date: October 14, 2025

The Italian-based organization ICET Studios has been listed on the leak site associated with the ransomware group known as thegentlemen. The group made the announcement on October 14, 2025, claiming that they have successfully gained access to the systems of the organization.

The claims made by thegentlemen

According to the announcement posted on the group's platform, thegentlemen claims to have breached the digital infrastructure of ICET Studios. This listing occurred on October 14, 2025, which coincides with the date the group claims the attack took place. At this stage, the announcement serves as a claim of unauthorized access by the threat actors.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. These sites often host directories of compromised organizations, sometimes providing proof of the breach to increase pressure. In many modern ransomware campaigns, attackers utilize a method known as double extortion. In this scenario, the actors do not merely encrypt the victim's data to disrupt operations; they also exfiltrate sensitive information to use as leverage, threatening to leak it publicly if the ransom is not met.

Details regarding the alleged data breach

Currently, the announcement does not provide a verifiable dataset to support the group's claims. There is no information available regarding the specific nature of the leaked or threatened data, nor has any specific file count or data size been disclosed by the attackers. Furthermore, no ransom demand has been made public in the current listing.

The listing does not name any specific data types that have been compromised. Due to a verification error appearing in the shared screenshots, the specific details that the group intended to share cannot be accessed or verified at this time.

About ICET Studios

ICET Studios is an Italian company that provides specialized services for the entertainment and events industry. The organization provides set design, decoration, and installation services for various types of productions, including cinema, television, and advertising. Additionally, the company offers turnkey solutions for the organization of trade fairs and events.

Potential implications and organizational risks

Public information regarding the thegentlemen group remains limited, making it difficult to assess their specific tactics, techniques, and procedures. However, the potential leak of an organization's data can lead to significant secondary risks. For the employees and business partners of a targeted company, such a breach can result in identity theft or the launch of highly targeted phishing attacks.

Because ICET Studios is based in Italy, a confirmed data breach could trigger specific legal processes and mandatory notification obligations under the General Data Protection Regulation (GDPR). Furthermore, in the sector in which the organization operates, the loss of commercial secrets or sensitive customer data could be exploited by ransomware actors through double extortion methods.

The overall severity of such an incident is highly dependent on the specific type and volume of the data that may have been leaked. To mitigate these risks, organizations typically focus on strengthening their defensive posture. This includes implementing robust access controls, maintaining regular offline backups, and conducting thorough employee training to recognize social engineering attempts. For companies handling high-value commercial secrets, monitoring for data exfiltration and ensuring strict compliance with regional data protection laws are essential components of a modern cybersecurity strategy.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories