VUS - The English Center listed on thegentlemen leak site

• Ransomware group: thegentlemen
• Country: Vietnam
• Sector: Education
• Announcement date: September 30, 2026

The threat actor known as thegentlemen has listed VUS - The English Center on a leak site. The announcement, which appeared on September 30, 2026, indicates a potential data breach involving the prominent Vietnamese educational institution.

The claims made by thegentlemen

According to the announcement, the group thegentlemen claims to have successfully obtained data belonging to VUS - The English Center. This claim is associated with a security incident that reportedly occurred on September 29, 2026. Following the alleged theft, the group has issued threats to publish the institution's data on their platform.

In many modern cyberattacks, threat actors employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information. The attackers then threaten to leak this stolen data on public forums or specialized leak sites if their demands are not met. This method increases the pressure on the victim, as the threat of public exposure can cause significant reputational and regulatory damage.

Details regarding the alleged data breach

At this stage, there is no screenshot or detailed information available regarding the nature of the data allegedly leaked. The listing does not specify the types of files, the volume of information, or the specific categories of data that the group claims to possess. Furthermore, no ransom demand has been publicly documented in relation to this specific claim.

• No specific data types were identified in the listing.

When an organization faces a potential leak, the absence of immediate information can make it difficult to determine the scope of the impact. Security professionals often monitor these leak sites to identify if an organization's data has indeed been posted, which helps in assessing the severity of the incident.

Organization profile: VUS - The English Center

VUS (Vietnam USA Society English Centers) is a major educational institution in Vietnam. Founded in 1997, it has grown to become the largest English-language school chain in the country. The institution operates with over 70 centers nationwide and employs thousands of staff members. VUS serves hundreds of thousands of students annually through various international programs, including Cambridge, IELTS, and TOEFL.

Risk assessment and industry implications

This incident may pose a risk of personal data exposure for the institution's staff and students. If the data is leaked, secondary risks such as identity theft or targeted phishing attacks may be observed. Such attacks often leverage stolen personal information to deceive individuals into revealing further credentials or financial details.

Given that the institution operates in Vietnam, reviews regarding compliance with local data protection regulations may be required. Organizations in the education sector are frequent targets for cybercriminals due to the high volume of sensitive personal and financial information they manage for students, parents, and employees. Protecting this data is critical for maintaining trust and meeting legal obligations.

General defensive steps for organizations in this sector include implementing robust multi-factor authentication (MFA), maintaining regular offline backups, and conducting frequent security awareness training for staff. Additionally, continuous monitoring of network traffic and strict access controls can help mitigate the risk of unauthorized data exfiltration. Information about the group thegentlemen is limited; therefore, a definitive assessment of their methods and motivations cannot be made at this time.