Jati Tinggi Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 19, 2026, the ransomware group thegentlemen listed Jati Tinggi on its leak site, stating that internal files had been exfiltrated during an attack on the Malaysian infrastructure company. Public records show no confirmation of the volume of data involved, the number of individuals affected, or whether any material has been published. The listing adds one more entry to the growing catalogue of claims made against organisations in critical sectors.

Inside the incident

The only confirmed detail is the April 19, 2026 listing itself. No information has been released about the date of the intrusion, the method of access, the duration of any encryption or data removal, or the scale of the operation. The group’s statement refers to “internal files” but supplies no further description. Whether the claim corresponds to actual data held by Jati Tinggi remains unverified by independent sources.

Who is thegentlemen?

Thegentlemen is a ransomware operator that maintains a public leak site where it lists organisations it claims to have compromised. Like other groups of its kind, it typically pairs file encryption on victim systems with the threat of releasing stolen material if a ransom demand is not met. The group has appeared in multiple public reports over recent years, though specific tactics, infrastructure, or prior victims connected to this listing have not been disclosed in the available facts.

About Jati Tinggi

Jati Tinggi Group Berhad is a publicly listed Malaysian company (KLSE: JTGROUP) founded in 2003 and based in Cheras, Selangor. It operates in the infrastructure utilities engineering sector, providing services that include underground and overhead electricity transmission, fibre-optic networks, drainage and sewerage pipelines, substation engineering, and street lighting. The firm employs between 51 and 200 people and functions as a subsidiary of Broad River Capital Sdn Bhd. Companies in this sector routinely handle project documentation, contractual records, and operational data tied to national utilities.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of file types, no count of records, and no indication of whether personal data, technical specifications, or financial information are involved have been made public. Organisations of this type commonly store employee records, supplier contracts, engineering drawings, and communications with utility clients, yet the precise contents of any material allegedly taken from Jati Tinggi remain unconfirmed.

The real-world impact

Exposure of internal files from an infrastructure engineering firm can create operational and competitive concerns for the company and its clients. If project or network-related documents were included, downstream utilities or government partners could face secondary questions about confidentiality. For individuals whose information appears in such files, the main risks are the usual ones associated with leaked corporate records: potential misuse for fraud or targeted follow-on contact. No evidence of wider distribution or confirmed misuse has been reported to date.

If your data was in this claimed breach

Begin by monitoring official statements from Jati Tinggi and any regulatory notices that may follow. Enable multi-factor authentication on accounts that share email addresses or other identifiers with the company. Review bank and credit statements for unusual activity. Individuals can also run a free exposure scan of their email address against known breach datasets to determine whether their information has appeared in previously published collections.

AICompiled with AI assistance from public sources and published under our editorial standards.