Skip to content
Ransomware

WRP Asia Pacific Sdn Bhd listed on thegentlemen leak site

WRP Asia Pacific Sdn Bhd has been listed on the leak site of the threat actor known as thegentlemen, who claims to have compromised the company's data.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: thegentlemen
  • Country: Malaysia
  • Sector: Manufacturing
  • Announcement date: January 20, 2026

WRP Asia Pacific Sdn Bhd has been listed on the leak site of the threat actor known as thegentlemen, who claims to have compromised the company's data. This announcement, made on January 20, 2026, marks the latest incident involving a major player in the manufacturing sector.

The details of the claim

The group known as thegentlemen announced on January 20, 2026, that they have added WRP Asia Pacific Sdn Bhd to their list of targets via a post on their leak site. While the post implies a breach of the company's network, no specific data samples or ransom demands have been disclosed. By listing the company on their platform, the group has put forward a claim of a data breach.

In many modern ransomware campaigns, threat actors utilize leak sites to exert pressure on victims. These sites serve as a public stage where attackers list organizations they have successfully infiltrated. This tactic is often associated with double extortion, where attackers not only encrypt an organization's systems but also threaten to release sensitive information to the public or specific stakeholders to compel payment. Even without a specific ransom demand being issued at the time of the announcement, the act of listing an organization is a significant escalation in a cyberattack lifecycle.

Data and content analysis

Regarding the specifics of the alleged breach, the current information remains limited. No data samples or specific file content were shared in the leak announcement. The provided screenshot displays a verification timeout error encountered while accessing the group's leak site, which may hinder further investigation into the group's claims. The listing names no specific data types that were allegedly stolen.

Organization profile

WRP Asia Pacific Sdn Bhd is a Malaysia-based company that manufactures and distributes high-quality gloves for the medical, dental, food, and critical environment markets. The company operates manufacturing facilities in Malaysia and Indonesia, adhering to international quality standards.

Risk assessment and implications

This incident may pose a risk to the operational continuity and commercial reputation of WRP Asia Pacific Sdn Bhd. Given the company's manufacturing and distribution operations, there may be a possibility that the allegedly compromised data includes supply chain or customer information. Due to data protection regulations in Malaysia and the company's international market presence (US, Europe), a potential data loss could trigger legal and compliance processes.

Information about the thegentlemen group is limited; therefore, a definitive assessment of the group's motivation and methods cannot be made. Secondary risks may include targeted phishing attacks against the company's customers or the disclosure of trade secrets. When manufacturing entities face such threats, the potential impact extends beyond the immediate digital environment to the physical supply chain.

Organizations operating in the manufacturing and distribution sectors often face unique challenges regarding cybersecurity. Protecting intellectual property, such as trade secrets and proprietary manufacturing processes, is critical for maintaining a competitive advantage. Furthermore, because these companies are often integrated into larger global supply chains, a breach can have ripple effects, potentially impacting the security and operational stability of their partners and customers. Defensive strategies typically involve robust network segmentation, continuous monitoring of industrial control systems, and comprehensive employee training to mitigate the risk of initial access via phishing or other common vectors.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories