Liztex Guatemala Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Liztex Guatemala was listed by thegentlemen ransomware group on June 04, 2026, after internal files were exfiltrated in a ransomware attack affecting an undisclosed number of people. Individuals connected to Liztex Guatemala should check whether their information was exposed and take protective steps.
On June 04, 2026, the ransomware group thegentlemen listed Liztex Guatemala on its leak site and claimed responsibility for a network intrusion. The organization is described publicly as a textile manufacturer with more than fifty years of operation in Guatemala. The number of individuals whose information may be involved remains unknown, and the company has not issued a public statement confirming or denying the claims.
The incident matters because the data described in the listing includes records that organizations of this type routinely hold on employees, customers, and business partners. When such files are copied and later published, the information can be used for identity-related fraud, targeted scams, or competitive intelligence without the consent of the people named in the records.
Breaking down the breach
The only confirmed public record of the incident is the June 04, 2026 listing on thegentlemen’s leak site. The group states that it encrypted Liztex Guatemala’s network and exfiltrated 398 GB of internal files. No independent verification of the volume, encryption status, or subsequent use of the data has been published. The exact date of the intrusion itself is not disclosed.
Inside thegentlemen
Thegentlemen is a ransomware operator that, like other groups in this category, advertises access to victim networks on a dedicated leak site. Its typical pattern involves initial network access, data exfiltration, deployment of encryption tools, and a demand for payment. When payment is not received, the group publishes file listings or samples to increase pressure. The listing of Liztex Guatemala follows this established pattern; the group claims the breach and the 398 GB exfiltration, but those statements have not been corroborated by Liztex or by third-party investigators.
Liztex Guatemala and its sector
Liztex Guatemala operates as a textile manufacturer. Companies in this sector maintain production records, supply-chain documentation, customer contracts, and employee files that include personal identifiers and, in some cases, health-related information required for workplace compliance. A compromise of these systems can expose both operational details and personal data belonging to workers and commercial partners.
What was likely exposed
Thegentlemen’s listing enumerates the categories of data it claims to have obtained. The precise contents of the 398 GB archive have not been independently confirmed, and Liztex has not released an official inventory of affected records.
- SAP data, contacts, contracts, planning, logistics, projects data
- Personal data, employee data, medical data, partners data, customers data
- Financial data, correspondence, production data, quality control data
- Offers and proposals, subsidiary data, other sensitive business data
The real-world impact
Individuals named in employee, customer, or medical records face the possibility that their details could be used for account takeover attempts or phishing campaigns. Business partners may see contract terms or pricing information circulated without authorization. For the organization, the incident creates operational disruption from any encryption that occurred and potential regulatory or contractual obligations once the scope of the data is clarified.
Were you affected?
Because the total number of records and the identities of affected individuals have not been published, anyone who has worked with or done business with Liztex Guatemala should treat their information as potentially exposed until the company provides further details. Practical first steps include:
- Monitoring bank and credit accounts for unusual activity
- Changing passwords for any accounts linked to the organization
- Enabling multi-factor authentication wherever available
- Running a free exposure scan of your email address against known breach datasets
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Excel Cell Electronic Listed by thegentlemen Ransomware GroupAutomovil Supply S.A Listed by thegentlemen Ransomware GroupMeccanica Gn Listed by thegentlemen Ransomware GroupCTM India Limited motherson INDIA Listed by thegentlemen Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Liztex Guatemala Listed by thegentlemen Ransomware Group →
Publicly posted by thegentlemen — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.