Liztex Guatemala targeted by thegentlemen ransomware group

• Ransomware group: thegentlemen
• Country: Guatemala
• Sector: Manufacturing
• Announcement date: June 4, 2026

Liztex Guatemala targeted by thegentlemen group

The ransomware group known as thegentlemen has listed the Guatemalan manufacturing firm Liztex Guatemala on its leak site. The threat actor group claims to have successfully breached the company's network and exfiltrated a significant volume of sensitive information.

Details of the alleged breach

According to the announcement published on June 4, 2026, the group asserts that they breached the network of Liztex Guatemala and subsequently encrypted their systems. The group claims that the attack occurred on June 3, 2026. As a result of this breach, the attackers claim to have exfiltrated 398 GB of data from the organization's infrastructure. Information regarding the specific identity or public profile of the thegentlemen group remains limited.

While the group has made these claims, no screenshot was provided to verify the contents of the stolen data. This incident appears to follow the pattern of double extortion, a common tactic in modern ransomware attacks where threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage for ransom demands.

Alleged data types involved in the leak

The group claims to have obtained a wide range of sensitive information. The alleged leak includes the following data types:

• SAP data
• Contact information
• Contracts
• Planning and logistics files
• Project data
• Personal data
• Employee data
• Medical data
• Partner and customer data
• Financial data
• Correspondence
• Production and quality control data
• Offers and proposals
• Subsidiary data

About Liztex Guatemala

Liztex is a leading Guatemalan textile manufacturer with over 50 years of experience. The company specializes in the production and supply of various types of fabrics.

Impact and risk assessment

The alleged breach may negatively impact the company's operational continuity and commercial reputation. The exposure of personal and medical data belonging to employees and customers could create secondary risks such as identity theft and targeted phishing attacks for the affected individuals. Furthermore, the disclosure of financial and strategic data may lead to a loss of competitive advantage.

Given the scope of the alleged data leak, the company may face legal sanctions under relevant data protection regulations. In incidents involving double extortion, the publication of exfiltrated data can significantly increase corporate confidentiality risks. For organizations in the manufacturing sector, such breaches highlight the necessity of robust cybersecurity frameworks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining offline backups, conducting regular security audits, and ensuring strict access controls to prevent unauthorized data exfiltration.