ServiceMaster of Ottawa Data Breach: The Gentlemen Ransomware Claim (Oct 2026)
Summary
In the latest cybersecurity news, ServiceMaster of Ottawa — an organization based in CA — has fallen victim to a ransomware attack conducted by the group thegentlemen. This data breach, discovered on 2026-10-16T09:32:12.716140+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | ServiceMaster of Ottawa |
| Threat Group | thegentlemen |
| Summary | svmottawa.ca ServiceMaster of Ottawa Canadian property restoration and commercial cleaning company (legal entity 1351120 Ontario Inc.), a ServiceMaster franchise since 1969 — owned since 2006 by John Cooke. HQ at 180 Wescar Lane, Ottawa (Carp/Richmond), ~140 staff, 24/7/365 emergency service across the National Capital Region. Core: water/fire/mold remediation, asbestos removal, reconstruction, odor control, janitorial — backed by IICRC techs, HCRA license B62544, Tarion, WSIB+liability, Restore 365/Xactimate. Record: 40,000+ customers served; Cooke won ServiceMaster’s “Brand Ambassador of the Year” 2026, “Mid-Market Business of the Year” (Ottawa Chamber, 2008). Reputation mixed (3.8–4.3/5, 313+ reviews) — excellent on small jobs and named techs (Ryan Potestio, Jeff Jerome) |
| Date of Breach | 2026-10-14T20:12:03+00:00 |
| Discovery Date | 2026-10-16T09:32:12.716140+00:00 |
| Region | CA |
| Target Domain | svmottawa.ca |
| Business Sector | Professional Services |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- data breach monitoring — close the gap attackers exploit.
- phishing simulation — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
