Mandurah State Emergency Service listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Australia
• Sector: Government & Defense
• Announcement date: October 3, 2026

Mandurah State Emergency Service listed on thegentlemen leak site

The Mandurah State Emergency Service, a volunteer emergency rescue unit based in Australia, has been listed on the leak site of a threat actor group known as thegentlemen. The group claims to have successfully targeted the organization, marking a potential breach of sensitive operational and historical information.

Details of the claimed attack

According to claims made by thegentlemen, the group gained unauthorized access to a server belonging to the Mandurah State Emergency Service. This incident was reportedly flagged by Western Australia cybersecurity authorities on October 5, 2026. While the group has published the organization's name on their platform, no screenshots of the stolen data have been provided to verify the claims at this time.

Ransomware groups often utilize leak sites as a method of double extortion. In these scenarios, attackers not only encrypt an organization's systems to disrupt operations but also threaten to release sensitive data on public forums to pressure the victim into paying a ransom. By listing a target on a leak site, the threat actor aims to increase visibility and pressure the victim through reputational damage.

Alleged data involved in the breach

The threat actor group alleges that the compromised server contained significant amounts of information. While the specific volume of data and the exact file count remain unknown, the group claims that the following types of information were accessed:

• Operational data
• Archive records, including historical archives prior to 2022
• Backups

The inclusion of backups and historical archives is particularly concerning for organizations, as these files often contain redundant copies of sensitive information that may have been previously secured or moved.

Organization profile

The Mandurah State Emergency Service is a volunteer rescue unit located in Western Australia. It operates as a non-profit entity and functions as part of DFES Western Australia. The organization is responsible for responding to various emergencies, including storms, floods, fire support, and search and rescue operations. Its operations are carried out through a network of volunteers and a dedicated youth cadet program.

Potential risks and sector implications

This incident may pose significant risks to the operational continuity and the sensitive data of a volunteer emergency unit. Depending on the actual nature of the leaked data, the exposure of operational procedures or information regarding volunteers could lead to secondary security risks. For organizations in the public sector, such exposure can lead to complex legal obligations under privacy laws and data protection standards.

The potential exposure of operational data could also trigger targeted phishing or social engineering attacks against similar public service organizations. When operational details are leaked, attackers can use that information to craft highly convincing messages to deceive employees or volunteers.

To defend against such threats, organizations in the public service and emergency response sectors typically implement defensive measures such as robust access controls, regular security audits, and comprehensive backup strategies. Maintaining strict data lifecycle management can also help minimize the impact of a breach by ensuring that unnecessary historical data is not stored on accessible servers. Furthermore, monitoring for unauthorized access and maintaining close communication with cybersecurity authorities are essential steps for organizational resilience.