Jati Tinggi listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Malaysia
• Sector: Manufacturing
• Announcement date: April 19, 2026

The threat group known as thegentlemen has listed the Malaysian engineering firm Jati Tinggi on its leak site. This announcement, made on April 19, 2026, follows a claimed attack date of March 26, 2026, marking a potential data breach for the infrastructure specialist.

The claims made by thegentlemen

According to the announcement posted by the threat group, the organization's data has been compromised. The group claims that the breach involves information related to the company's infrastructure and engineering operations. While the group has officially listed the company on its platform, public information regarding the specific identity and operational details of the thegentlemen group remains limited.

In many modern ransomware scenarios, threat actors employ a tactic known as double extortion. This method involves not only encrypting an organization's systems to disrupt operations but also exfiltrating sensitive data. The actors then threaten to leak this stolen information on public platforms if a ransom is not paid. This approach increases the pressure on the victim by threatening their reputation and legal standing, even if they have robust backups to restore their systems.

Details of the alleged data leak

Regarding the specifics of the stolen information, the group has not provided a detailed description or any screenshots to substantiate their claims. The listing names no specific data types or file counts.

About Jati Tinggi

Jati Tinggi Group Berhad is a public listed engineering company based in Malaysia. Since its founding in 2003, the company has specialized in various infrastructure projects. Their core expertise includes electricity transmission and distribution, fiber optic networks, and sewerage systems. The company provides comprehensive EPCC (engineering, procurement, construction, and commissioning) services, primarily serving the energy and utilities sector.

Potential impacts and industry considerations

The alleged incident could lead to several significant consequences for the organization. Such a breach may negatively impact the company's operational continuity and its commercial reputation. Depending on the actual content of the leaked data, secondary risks may emerge, specifically targeting the company's engineering projects or its various supply chain partners.

Furthermore, the situation may trigger legal obligations under Malaysian data protection regulations, which could result in investigations by the relevant authorities. If the breach involves employee or customer data, it could create a foundation for identity theft or the execution of targeted phishing attacks against the company's stakeholders.

For organizations operating within the engineering and utility sectors, these types of threats highlight the importance of robust cybersecurity frameworks. Defensive strategies often include implementing strict access controls, maintaining comprehensive logging to detect unauthorized movement, and ensuring that all supply chain partners adhere to rigorous security standards. Protecting the integrity of engineering project data is vital to maintaining the trust of both government and private sector clients.

• Operational continuity risks
• Reputational damage
• Supply chain vulnerabilities
• Legal and regulatory scrutiny
• Phishing and identity theft risks