CROSS JEANS Zakrt Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On February 15, 2026, the ransomware group thegentlemen listed CROSS JEANS Zakrt on its leak site and stated that internal files had been exfiltrated during an attack. No information has been released on the number of individuals affected or the precise volume of data involved. The incident adds to the pattern of ransomware operations that combine encryption with data theft and public disclosure pressure. Retail organizations that maintain customer accounts and supply-chain records remain frequent targets because their systems often hold both personal identifiers and operational documents.

Inside the incident

The only confirmed detail is the listing itself. The group claims to have taken internal files; no confirmation of encryption, ransom demand, or restoration status has been made public. The number of people affected is listed as unknown, and no timeline for the intrusion or exfiltration has been disclosed.

Who is thegentlemen?

Thegentlemen is a ransomware operator that publishes victim names on a dedicated leak site after data exfiltration. Public reporting has associated the group with double-extortion tactics, in which data is copied before encryption and then used to pressure organizations that decline to pay. The group’s listings are treated as claims until independently verified by the named organization or by law-enforcement disclosure.

Who is CROSS JEANS Zakrt?

CROSS JEANS Zakrt operates crossjeans.pl, an online store that sells denim clothing and related apparel for men and women. The business handles customer orders, payment information, and supplier records typical of a direct-to-consumer clothing retailer. A breach at such a firm can expose both personal customer data and internal commercial documents.

What was likely exposed

The listing states that internal files were exfiltrated. The exact categories of data have not been published. Organizations of this type commonly store customer names, addresses, order histories, and payment tokens, as well as employee records and supplier contracts; whether any of these specific items were taken remains unconfirmed.

Why it matters

Even without a confirmed count of affected individuals, the exposure of internal files can create downstream risks including account takeover attempts and targeted phishing. For the company, the incident may trigger regulatory notification obligations and require forensic review of systems that process customer transactions.

Were you affected?

Individuals who have placed orders with CROSS JEANS Zakrt can monitor their email accounts for unusual activity and consider changing passwords on any linked retail accounts. A free exposure scan of an email address against known breach data sets can indicate whether the address has appeared in previously published incidents; no public list specific to this event has been released.

AICompiled with AI assistance from public sources and published under our editorial standards.