EP Manufacturing Bhd Listed by The Gentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

A ransomware group known as The Gentlemen has listed EP Manufacturing Bhd on its leak site, according to a report dated 31 August 2026. That listing is an accusation, not a claimed incident: as of writing, the company has not publicly stated that any breach occurred or that any data left its systems. For employees, suppliers, dealers, customers and others who deal with a Malaysian automotive manufacturer, the practical question is straightforward. If records were copied, personal and commercial details sometimes held by firms in this sector could be misused for fraud, phishing or competitive harm. Public detail on whether that happened here, and to whom, remains limited.

What is known so far is only what appears in the group's claim and in open background on the business. No independent confirmation, regulator notice or company statement is reflected in the available facts. Readers should treat the situation as unresolved and act on a precautionary basis rather than assume their information is already in criminal hands.

Inside the listing

The Gentlemen ransomware group has listed EP Manufacturing Bhd on its leak site. The report associated with that listing is dated 31 August 2026. The number of people potentially affected is unknown. The types of data the group claims to hold are not disclosed in the available facts. Method of access, timing of any alleged intrusion, volume of material and whether any files were published are likewise undisclosed.

A leak-site listing is a pressure tactic common in ransomware and extortion campaigns. It signals that a group wants payment or attention; it does not by itself prove that systems were compromised or that a full copy of internal data exists. Until the company, a regulator or another independent source confirms otherwise, the listing should be read as an unverified claim by the named group.

Who is The Gentlemen?

The Gentlemen is a ransomware and extortion actor known in public reporting for double-extortion style operations: encrypting systems where they can, and threatening to publish or sell stolen data on a dedicated leak site if demands are not met. Groups in this category typically advertise victims to increase pressure, sometimes with countdowns or sample files. Their public posts are marketing for an extortion effort and can exaggerate scale or recycle older material.

Nothing in the facts establishes what, if anything, The Gentlemen obtained from EP Manufacturing Bhd beyond the bare fact of the listing. Claims on such sites about file counts, financial databases or “full dumps” are not inventories verified by outsiders. For this incident, the group’s listing is the claim; specifics beyond that listing are not provided in the material at hand.

About EP Manufacturing Bhd

EP Manufacturing Bhd (often referred to in market contexts as EPMB, Bursa Malaysia code 7773) is a Malaysian automotive manufacturer with roots going back to 1982. Public business descriptions indicate a history of parts supply for marques such as Proton, Perodua, Honda and Toyota, and a later shift toward assembling complete vehicles in Melaka for Chinese brands including GWM, BAIC, XPENG and MG. Capacity figures cited in open summaries point to an annual capability on the order of 30,000 vehicles, with 2026 output described as exceeding 1,000 cars per month in some periods. Financial snapshots in the same vein refer to a strong Q2 2026 result (net profit around RM5.15 million and revenue around RM212.7 million), a share price near RM0.44, a market capitalisation near RM125 million and a modest dividend yield, alongside familiar sector risks such as debt and liquidity pressure.

Organisations of this type sit at the centre of supply chains, dealer networks, workforce administration and regulated manufacturing. A credible compromise at such a firm would matter because of the mix of industrial, commercial and personal data that automotive manufacturers and assemblers commonly process—not because any particular theft has been proven in this case. The leak-site listing raises a question about possible exposure; it does not answer it.

The information in question

The available facts state that data types named as exposed are not disclosed. It is therefore not possible to say which systems or record categories, if any, were involved. Asserting a specific inventory would go beyond the evidence.

If files were taken from a company in this sector, firms of this kind typically hold some combination of employee human-resources and payroll data, contractor and supplier contacts, customer or dealer information, production and logistics records, quality and compliance documentation, and ordinary business email and finance files. That is a sector pattern, not a description of what The Gentlemen possesses here. Exact contents remain unconfirmed. People affected, if any, are unknown.

Why it matters

For individuals, the conditional risk is familiar. If personal data were among material criminals obtained, it could be used to craft convincing phishing, attempt account takeover, or support identity fraud. Staff and partners might see targeted messages that reference real projects, plants or invoices. Suppliers could face invoice fraud or social-engineering attempts. None of that is established as having occurred because of this listing; it is the kind of harm that follows confirmed thefts in manufacturing and automotive supply chains.

For the organisation, an extortion listing can disrupt operations, distract management, worry counterparties and invite scrutiny from customers and markets even when the underlying claim is unproven or incomplete. Reputation and contractual notice obligations can come into play once a company investigates. Again, those are consequences of how leak-site campaigns work in general, not findings about EP Manufacturing Bhd’s security or response. The listing alone does not establish negligence, successful intrusion or data publication.

Because people affected and data types are unknown, the responsible stance for readers is precaution without panic: treat the claim seriously enough to harden personal and business hygiene, and wait for confirmed detail from the company or official channels before concluding that any particular record is in the wild.

Steps worth taking either way

If you work with or for EP Manufacturing Bhd, or you suspect your details may sit in its systems, sensible steps do not depend on proving the listing true. Use unique passwords and multi-factor authentication on email, HR portals, banking and supplier platforms. Treat unexpected messages about invoices, password resets, shipping changes or “urgent” wire requests with scepticism, even if they use real names or project details. Monitor bank and credit activity where that is practical in your country. If you are an employee or contractor, follow only official internal guidance once the company issues any.

If material were ever published, criminals often repurpose addresses and phone numbers for long-running scam campaigns; staying alert for months is more useful than a one-day reaction. You can also run a free exposure scan of your email to check whether your information has already surfaced in known breach data from other incidents. That check does not confirm or deny this particular claim, but it helps you see whether your addresses appear in widely circulated dumps and whether password changes are overdue.

Public detail on this listing remains thin. The Gentlemen has named EP Manufacturing Bhd; the company has not publicly confirmed an incident in the facts at hand. Conditional caution is warranted. Certainty is not.

AICompiled with AI assistance from public sources and published under our editorial standards.