Ransomware Group thegentlemen Hits: Agospap
Summary
In the latest cybersecurity news, Agospap — an organization based in GR — has fallen victim to a ransomware attack conducted by the group thegentlemen. This data breach, discovered on 2026-09-30T03:37:14.458576+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | Agospap |
| Threat Group | thegentlemen |
| Summary | agospap.com zoominfo.com/c/agospap/357851962 AGOSPAP (founded 2 November 1981, Paris) is a non-profit association (loi 1901) that manages social, cultural and leisure benefits for ~150,000 staff of the AP-HP hospital system and the City of Paris plus ~20 affiliated public bodies — effectively a cross-institutional works-council fund. With 45 employees and income tied to 0.5% of the two founders’ payroll (≈€28M/year in subsidies; €49M total budget), it provides income-scaled holiday stays, children’s camps (4–17), a cultural ticketing platform, Christmas gifts, social grants (birth/marriage/service medals) and the new Pass’Sport sports voucher. Led by president Jean-Paul Brandela (since Oct 2023) and director-general Anne Schaetzel (since 2013), it is ISO 9001-certified and holds an Atout France travel-operator license with UNAT financial guarantees. Funding remains politically sensitive: a €2M cut by the City in 2023 briefly suspended camp registrations |
| Date of Breach | 2026-09-29T15:43:51+00:00 |
| Discovery Date | 2026-09-30T03:37:14.458576+00:00 |
| Region | GR |
| Target Domain | agospap.com |
| Business Sector | Not Found |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- realistic phishing tests — close the gap attackers exploit.
- train staff to spot attacks — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
