Mutant listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Brazil
• Announcement date: September 7, 2026

The threat actor known as thegentlemen has listed the Brazilian technology company Mutant on a leak site, claiming to have compromised the organization's data. The announcement, which appeared on the group's leak site on September 7, 2026, suggests that the group has gained unauthorized access to the systems of the organization.

The nature of the claim

According to the post published by thegentlemen, the group has successfully breached the systems of Mutant. The listing appeared on September 7, 2026, and serves as an allegation of unauthorized access. At this stage, public information regarding the specific identity, methods, or background of the group known as thegentlemen remains limited. In many modern cyberattacks, threat actors utilize leak sites to exert pressure on victims through a tactic known as double extortion. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also threaten to publish sensitive information on public forums to coerce the victim into paying a ransom.

The presence of a listing on a leak site is a significant event in the lifecycle of a cyberattack, as it marks the transition from a silent intrusion to a public extortion attempt. However, it is important to note that the claims made by threat actors on these platforms are not always verified, and the actual impact of the intrusion remains to be confirmed through independent investigation.

Data and evidence

Regarding the specific details of the alleged breach, the information provided by the threat actor is currently insufficient to determine the full scope of the incident. The listing does not provide any details regarding the nature or the specific content of the data that has allegedly been compromised. Furthermore, the group has not provided any screenshots or samples to substantiate their claims of unauthorized access.

The listing names no specific data types or file categories that have been targeted or stolen.

About Mutant

Mutant is a major Latin American technology company that specializes in customer experience (CX) and artificial intelligence solutions. Since its founding in 2016, the company has focused on providing AI-driven interaction management and digital transformation services for its enterprise clients. Given its role in providing digital transformation and AI-driven services, the company maintains an extensive operational network to support its corporate customers.

Risk assessment and implications

This incident may pose a risk of exposure for corporate data and customer interaction records within Mutant. Because the company operates extensively in the fields of artificial intelligence and customer experience, a potential breach could lead to secondary risks for its enterprise clients. If sensitive interaction records or corporate data are indeed exposed, the impact could extend beyond the organization itself to the businesses that rely on its services.

From a regulatory perspective, the organization may face legal scrutiny regarding its data protection obligations under Brazil's LGPD regulations. Such frameworks are designed to ensure that organizations maintain strict controls over personal data and notify relevant parties in the event of a breach. Additionally, the possibility of the leaked data being utilized in identity theft or targeted phishing campaigns should be considered, as stolen information is often used by criminals to conduct more sophisticated social engineering attacks.

At this time, the lack of concrete evidence regarding ransom demands or specific data samples suggests that the severity of the situation remains to be determined. In general, organizations in the technology and service sectors can mitigate such risks by implementing robust defensive measures. These include maintaining strict access controls, implementing multi-factor authentication, and ensuring continuous monitoring of network traffic to detect unauthorized access. Furthermore, regular security audits and adherence to data protection frameworks are essential for managing the risks associated with large-scale digital operations.