Ransomware Group thegentlemen Hits: Balkan Polymers
Summary
In the latest cybersecurity news, Balkan Polymers — an organization based in BG — has fallen victim to a ransomware attack conducted by the group thegentlemen. This data breach, discovered on 2026-09-15T07:15:09.026597+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | Balkan Polymers |
| Threat Group | thegentlemen |
| Summary | balkanpolymers.com zoominfo.com/c/balkan-polymers/397725276 Balkan Polymers Serbian polymer recycling group founded in 2011 in Zrenjanin by Aleksandar Nikolić — a German-trained chemical engineer who returned home after careers at BASF and Nike — now running 4 plants (3 Serbia + 1 Slovakia) processing 26,000 tons of polymers per year (~$20–25M revenue est.). Full vertical integration: collection → optical sorting → shredding → hot washing → extrusion → compounding, producing rPP, rPE (LDPE/HDPE) and rPS granules for packaging, automotive and construction manufacturers across 10+ CE markets (Germany, Austria, Italy, Poland, Czechia…). Certified EuCertPlast — the EU traceability standard that unlocks “recycled content” claims; environmental math: ~52,000 tons CO₂-equivalent saved and ~1.3 billion PET bottles rescued annually. Backed by state-level recognition (President Vučić cites it as a model diaspora business) and riding EU recycled-content directives (25% rPET by 2025, 30% by 2030 |
| Date of Breach | 2026-09-14T15:32:00+00:00 |
| Discovery Date | 2026-09-15T07:15:09.026597+00:00 |
| Region | BG |
| Target Domain | balkanpolymers.com |
| Business Sector | Manufacturing |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- dark web monitoring — close the gap attackers exploit.
- data breach monitoring — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
