Skip to content
Ransomware

Shtainmetz Aminoach listed on thegentlemen leak site

The threat actor group known as thegentlemen has listed the Israel-based accounting firm Shtainmetz Aminoach on its leak site.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: thegentlemen
  • Country: Israel
  • Sector: Professional Services
  • Announcement date: January 20, 2026

The threat actor group known as thegentlemen has listed the Israel-based accounting firm Shtainmetz Aminoach on its leak site. This announcement, made on January 20, 2026, indicates a potential compromise of the organization's data, marking a significant development in the ongoing landscape of cyber extortion.

The claimed attack and event details

On January 20, 2026, the thegentlemen group officially listed Shtainmetz Aminoach on its dedicated leak platform. Through this listing, the threat actors claim that data belonging to the firm has been compromised. The publication of such a listing on a ransomware leak site is a common tactic used in double extortion schemes, where attackers not only encrypt an organization's systems but also threaten to release sensitive information to pressure the victim into paying a ransom.

The mere presence of the firm's name on the group's platform suggests that the firm's operational processes may be at risk. While the listing serves as a public claim by the threat actors, it highlights the growing vulnerability of professional service firms to targeted cyberattacks aimed at high-value data repositories.

Details regarding the alleged leaked data

At this stage, the specifics of the breach remain unclear. No details regarding the nature of the alleged leaked data have been provided by the threat actors. The available information, such as screenshots from the leak site, only displays the general interface of the group's platform and does not contain any specific data samples or evidence of the stolen files.

The listing names no specific data types or categories of information that have supposedly been exfiltrated.

Organization profile: Shtainmetz Aminoach

Shtainmetz Aminoach is a leading accounting and financial consulting firm based in Israel. The firm specializes in critical financial areas such as tax planning, international taxation, and financial consulting. Because of its specialized expertise, the firm provides essential services to a diverse range of sectors, including high-tech, real estate, and e-commerce.

Implications and industry considerations

A data leak claim against a firm providing financial and accounting services, such as Shtainmetz Aminoach, may pose significant risks to client confidentiality and trade secrets. Given the sensitive nature of financial and tax documentation, such a breach could have far-reaching consequences for the clients served by the firm.

There are several potential outcomes and risks associated with this incident:

  • Legal and regulatory risks: It is possible that the firm could face legal obligations under Israeli data protection regulations following a breach of this nature.
  • Secondary attacks: The alleged leak may create a foundation for identity theft or targeted phishing attacks against the firm's clients.
  • Cross-border implications: The firm's membership in international networks suggests that a potential data breach could have implications that extend beyond national borders.

Public information regarding the thegentlemen group is limited; therefore, the group's specific motivations and technical capabilities remain uncertain. In the broader context of cybersecurity, organizations in the professional services sector often face these types of threats due to the high value of the client data they manage. To mitigate such risks, organizations typically focus on robust data protection strategies, including encryption, multi-factor authentication, and continuous monitoring of their networks to detect unauthorized access or data exfiltration attempts.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories