VeriCon listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Netherlands
• Sector: Professional Services
• Announcement date: May 9, 2026

Thegentlemen claims VeriCon data breach

The threat actor known as thegentlemen has listed the Dutch organization VeriCon on their leak site. According to the announcement made on May 9, 2026, the group claims to have access to data belonging to the firm following a cyberattack.

The group's announcement suggests that the incident occurred on May 8, 2026. At this time, information regarding the specific identity and methods of thegentlemen group remains limited in the public domain. Ransomware groups often utilize leak sites to pressure victims through double extortion, a tactic where stolen data is threatened with public release if a ransom is not paid. While the listing exists, no screenshots or detailed information regarding the nature of the alleged leaked data have been provided by the threat actor.

Details of the alleged incident

The listing provided by thegentlemen does not specify the volume of data stolen or the specific file count involved in the breach. Furthermore, there is no information available regarding a ransom demand or the specific nature of the files claimed to be in the group's possession. The announcement is categorized as a data leak notification.

The listing names no specific data types that have been compromised.

About VeriCon

VeriCon is an independent structural engineering consultancy firm based in Veldhoven, Netherlands. The company provides design, calculation, and drafting services for civil and commercial construction projects. They specialize in BIM processes as well as prefabricated concrete and steel structures.

Potential impact and industry risks

Given VeriCon's operations in structural engineering, the leaked data may contain technical drawings, structural calculations, and commercial contracts related to ongoing projects. This could potentially harm the firm's intellectual property and compromise the security of their construction projects. As the company is based in the Netherlands, the incident may fall under the scope of the EU General Data Protection Regulation (GDPR).

Furthermore, such leaks could lead to secondary risks, including supply chain attacks or targeted phishing campaigns. Data privacy risks may also arise for the company's clients and business partners. In the professional services sector, maintaining the integrity of technical documentation is vital for project safety and client trust.

Organizations in similar sectors often implement defensive measures to mitigate such risks. These typically include robust access controls, regular security audits, and comprehensive encryption for sensitive technical files. Monitoring for unauthorized data exfiltration and maintaining strict vendor management protocols are also common practices to protect against supply chain vulnerabilities and secondary phishing attempts.