Rogers Capital listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Mauritius
• Sector: Financial Services
• Announcement date: January 14, 2026

The Mauritius-based financial services company Rogers Capital has been listed on a leak site by a threat actor group known as thegentlemen. The announcement, made on January 14, 2026, involves a claim of a data breach against the organization, which the group alleges occurred around February 19, 2025.

The claims made by thegentlemen

The threat actor group thegentlemen has published a listing for Rogers Capital on their leak site, asserting that they have successfully executed a data breach. In their announcement, the group has leveled several criticisms against the organization. Specifically, the group alleges that Rogers Capital failed to implement adequate security measures to protect its environment. Furthermore, the attackers have criticized the competence of the company's employees during the incident.

The group further claims that the organization did not attempt to resolve the issue following the initial breach. According to the threat actors, this perceived lack of response or failure to engage with the situation led to the decision to publicly list the company on their leak site. Such tactics are common in modern cyberattacks, where groups use public pressure to escalate their demands or to damage the reputation of the target.

Information regarding the alleged data breach

At this stage, no specific information has been provided regarding the nature or the content of the data that has allegedly been leaked. The group has not disclosed the volume of the data or the specific number of files involved. The listing currently shows only a generic verification error from the group's leak site, which prevents further details from being visible. Consequently, the listing names no specific data types.

The risks of double extortion

This incident highlights the mechanics of modern ransomware operations, which often involve a strategy known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this data on a public site serves as additional leverage to pressure the victim into paying a ransom. When a group lists a company without immediately providing a sample of the data, it creates significant uncertainty for the target and its stakeholders.

About Rogers Capital

Rogers Capital is a company based in Mauritius that provides integrated financial and technological solutions. The organization operates across several specialized domains, including corporate services, trust management, IT/telecommunications, and consumer finance. By operating in these diverse areas, the company serves a wide range of clients in both local and international markets.

Impact and industry implications

This incident suggests that sensitive client and operational data of a firm operating in the financial services sector may be at risk. Given the nature of the company's trust-based services, a potential data breach could lead to significant reputational damage and various legal consequences. The organization may be subject to specific obligations under the data protection regulations of Mauritius. Additionally, such an incident could increase the risk of identity theft for the company's customers.

Regarding the threat actor, information regarding the thegentlemen group remains limited. Because of this, the group's specific motivations and technical capabilities remain uncertain. There are also secondary risks to consider, such as the potential use of any leaked data in targeted phishing attacks against the company or its clients.

Defensive considerations for financial institutions

Organizations operating within the financial services sector face unique challenges due to the high value of the data they manage. To mitigate the risks associated with such breaches, industry experts generally recommend several defensive layers. These include implementing robust access controls, maintaining rigorous patch management programs, and conducting regular security awareness training for employees to address the human element of security. Furthermore, continuous monitoring of network traffic and the implementation of data loss prevention tools can help detect and prevent unauthorized data exfiltration before it reaches a critical stage.