Ransomware Group thegentlemen Hits: Confluent
Summary
In the latest cybersecurity news, Confluent — an organization based in US — has fallen victim to a ransomware attack conducted by the group thegentlemen. This data breach, discovered on 2026-10-12T04:39:33.974759+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | Confluent |
| Threat Group | thegentlemen |
| Summary | confluent.io Revenue $1.16 Billion Confluent is the enterprise data streaming platform built on Apache Kafka that lets companies process live events like payments, orders and sensor data in real time, and it is now owned by IBM which bought it for about $11 billion in March 2026. It ended 2025 with 6,690 customers including roughly 40% of the Fortune 500 and grew revenue 21% with its cloud segment alone growing 27%. Customers include BMW, L’Oreal, Michelin and Ticketmaster and the platform runs across 60+ cloud regions on AWS, Azure and Google Cloud. Money comes from cloud usage and software subscriptions, about 96% of revenue, paid for compute and data transfer rather than per-seat fees. Around 3,241 employees worked at Confluent across 27 countries before the IBM deal and it owns no factories or stores because its product is pure software and cloud. Confluent was still unprofitable with a $295 million loss in 2025 though it earned positive operating income excluding stock pay. |
| Date of Breach | 2026-10-10T00:00:00+00:00 |
| Discovery Date | 2026-10-12T04:39:33.974759+00:00 |
| Region | US |
| Target Domain | confluent.io |
| Business Sector | Technology |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- monitor the dark web for leaked logins — close the gap attackers exploit.
- continuous breach monitoring — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
Related articles
Ransomware Group thegentlemen Hits: KFC
Ransomware Group thegentlemen Hits: BigID
Ransomware Group thegentlemen Hits: Placer AI
