Instituto Nacional de Derechos Humanos listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Chile
• Sector: Government & Defense
• Announcement date: February 10, 2026

Thegentlemen claims attack on Instituto Nacional de Derechos Humanos

The threat actor known as thegentlemen has officially listed the Instituto Nacional de Derechos Humanos (INDH) on their dedicated leak site. According to the announcement made on February 10, 2026, the group claims to have obtained unauthorized access to the institution's data. This development follows a pattern common in modern cyber extortion, where threat actors target high-profile organizations to exert pressure through the threat of data exposure.

The group's announcement occurred on the same day they claim the attack took place, February 10, 2026. While the listing is active on the group's platform, the specific details regarding the content of the data or the specific demands made by the group have not been disclosed at this time. In many ransomware scenarios, threat actors utilize double extortion tactics, where they not only encrypt an organization's systems but also steal sensitive information to use as leverage during negotiations. By threatening to release this data on a public leak site, attackers aim to maximize the pressure on the victim to meet their financial or other demands.

Details regarding the claimed data breach

At this stage of the incident, there is no information available regarding the nature or the scope of the data allegedly compromised during the unauthorized access. The listing does not specify the volume of files involved or the total size of the data set. Furthermore, no specific ransom demand has been made public by the group in relation to this specific target.

The listing names no specific data types that have been compromised. While the group's leak site is the source of the claim, attempts to view the specific details have encountered technical issues, as evidenced by a technical error message appearing when attempting to access the group's platform. This lack of clarity is common in the early stages of a leak site announcement, where the full extent of the breach remains unknown to both the public and the victim.

The organization profile

The target of this alleged attack is the Instituto Nacional de Derechos Humanos (INDH), an autonomous state institution located in Chile. The INDH serves a critical role in the country's governance and social fabric, working to promote a culture of respect for human rights. The institution is tasked with monitoring state actions and aims to protect the dignity of individuals through its oversight and advocacy functions.

Potential impact and organizational implications

Because the victim is a state institution, a potential data breach carries significant implications. The exposure of sensitive personal information and administrative records could result in severe consequences for both the institution and the individuals whose data is held by the state. Such incidents often trigger legal obligations under regional data protection regulations, which may lead to administrative penalties for the organization if compliance standards were not met.

Beyond legal and regulatory risks, there is a high possibility that any compromised data could be leveraged for targeted phishing attacks. Malicious actors often use stolen administrative or personal information to craft highly convincing social engineering campaigns directed at public officials or citizens. This can lead to further security compromises across other government sectors.

For organizations operating within the government and defense sector, such incidents can lead to significant reputational damage and operational disruptions. To mitigate these risks, organizations typically focus on robust defensive measures, including:

• Implementing strict access controls and multi-factor authentication to prevent unauthorized entry.
• Maintaining regular, offline backups to ensure data integrity and recovery capabilities.
• Continuous monitoring of network traffic to detect anomalous behavior indicative of an intrusion.
• Conducting regular security awareness training to defend against phishing and social engineering.

The limited information available regarding the thegentlemen threat group makes it difficult to assess the full scope of the threat they pose, but the targeting of a human rights institution highlights the increasing trend of attackers focusing on entities that manage sensitive societal data.