MakoLab listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Poland
• Sector: Technology
• Announcement date: July 1, 2026

The threat actor known as thegentlemen has listed data allegedly belonging to MakoLab on their leak site. The announcement, posted on July 1, 2026, suggests that the organization has been targeted in a data breach involving its operations.

The claimed attack event

According to the announcement made by thegroup thegentlemen, the incident occurred on June 30, 2026. The group's claims involve a data breach specifically targeting the digital transformation and software development operations of the firm. Such claims are typical of ransomware groups that utilize double extortion tactics, where attackers not only encrypt an organization's data but also threaten to leak sensitive information on public platforms to pressure the victim into paying a ransom.

In these types of cyberattacks, threat actors often target specific business processes to maximize leverage. By claiming to have compromised the core service offerings of a company—in this case, software development and digital transformation—the attackers aim to undermine the trust that the organization's clients place in its technical capabilities and data handling procedures.

Details of the alleged data breach

Regarding the specific nature of the information involved in this incident, the announcement provides no specific details or screenshots. The listing does not provide information regarding the volume of the data or the specific file types that have been compromised. Furthermore, there is no information provided regarding a ransom demand or the total number of files involved in the alleged breach.

The listing names no specific data types that have been affected by the incident.

About MakoLab

MakoLab is a Poland-based IT consulting and software development company. The firm specializes in several high-level technical domains, including digital transformation, artificial intelligence, custom software engineering, and human-centric design. On a global scale, the company provides technology consulting and operational support services to a variety of enterprise clients.

Risk assessment and industry implications

This incident may present a risk of exposure for MakoLab's corporate data and client information. Given the company's operations in the technology and software development sector, the breach could potentially compromise intellectual property and client projects. For organizations operating in this sector, the theft of proprietary code, project roadmaps, or architectural designs represents a significant threat to their competitive advantage and client confidentiality.

Furthermore, because the firm is based in Poland, a potential data breach may trigger legal sanctions and compliance processes under EU GDPR regulations. Such regulatory frameworks impose strict requirements on how personal data must be protected and how breaches must be reported to authorities and affected individuals.

The leaked data could potentially be utilized for identity theft or targeted phishing attacks. In the broader context of cybersecurity, once data is leaked on a public site, it often enters a secondary market where it can be used for various malicious purposes. Organizations in the technology sector can mitigate these risks by implementing robust encryption, enforcing strict access controls, and maintaining rigorous patch management protocols to prevent unauthorized entry into their development environments.

General defensive considerations

While information regarding the group thegentlemen is limited, the pattern of their activity highlights the ongoing risks faced by digital service providers. To defend against such threats, organizations typically focus on multi-factor authentication, continuous monitoring of network traffic, and comprehensive employee training to recognize social engineering attempts. Maintaining a strong incident response plan is also a critical component of a modern cybersecurity posture, ensuring that if a breach does occur, the impact can be managed effectively and compliance requirements can be met promptly.