Ransomware Group thegentlemen Hits: FTAPI Software
Summary
In the latest cybersecurity news, FTAPI Software — an organization based in US — has fallen victim to a ransomware attack conducted by the group thegentlemen. This data breach, discovered on 2026-09-26T08:42:43.611644+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | FTAPI Software |
| Threat Group | thegentlemen |
| Summary | ftapi.com zoominfo.com/c/ftapi-software/346927067 FTAPI (founded 2010, Munich, Germany) is a software company offering a secure, GDPR-compliant platform for exchanging sensitive business data and automating workflows — encrypted email and file transfer, virtual data rooms, digital forms and no-code process automation. It serves 2,000+ organizations and over a million users, mainly in public administration, healthcare, insurance and industry, with all data hosted exclusively in Germany under strict certifications (ISO 27001, BSI C5, SOC 2) and optional zero-knowledge encryption. Its core selling point is European digital sovereignty — a compliant alternative to US cloud tools like Dropbox under GDPR, NIS-2 and DORA regulations. In 2025 it raised €65 million from PE investors Armira and Tikehau Capital, which took control to fund EU expansion and acquisitions. The company employs around 150 people and targets becoming a leading European player in secure data exchange by 2028–29. |
| Date of Breach | 2026-09-25T09:30:46+00:00 |
| Discovery Date | 2026-09-26T08:42:43.611644+00:00 |
| Region | US |
| Target Domain | ftapi.com |
| Business Sector | Technology |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- keep watch on the dark web — close the gap attackers exploit.
- real-time breach alerts — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
