Open Options Listed by thegentlemen Ransomware Group: What Was Exposed & What To Do

On July 11, 2026, the ransomware group thegentlemen listed Open Options on its leak site, stating that internal files had been exfiltrated in a ransomware attack. The number of people affected is not known, and no additional details on the scope or contents of any data have been released. This listing forms part of a continuing pattern in which ransomware operators target technology firms whose products support physical security and access management for other organizations.

Inside the incident

The only public information available is the group’s listing itself, which asserts that files were taken during a ransomware operation. No dates for the intrusion, no description of the access method, and no figures for the volume or type of data have been disclosed. Open Options has not published a confirmation or denial of the claim.

Inside thegentlemen

Thegentlemen is a ransomware group that uses a public leak site to list organizations from which it claims to have obtained data. Groups of this kind typically encrypt systems and threaten to release stolen material unless payment is made. The listing of Open Options constitutes the group’s claim regarding this incident; independent confirmation of the underlying events has not been reported.

Open Options and its sector

Open Options developed open-architecture access control software, most notably the DNA Fusion platform, for enterprise physical security and identity management. The company was based in Texas. After a strategic acquisition, its technology and brand were integrated into Acre Security and now operate as DNA Fusion by acre security. Firms in this sector commonly hold configuration data, credential records, and client installation details that relate directly to the physical security of other organizations.

What was likely exposed

The listing refers only to “internal files exfiltrated in ransomware attack.” No further breakdown of data categories has been provided. Organizations of this type routinely maintain technical documentation, customer records, and system configuration information, but the exact contents of any exfiltrated material remain unconfirmed.

The real-world impact

Release of internal files from a physical-security software provider could disclose details of client access systems and facility layouts. For the company, the incident may prompt extended forensic review, notification obligations, and questions from customers about the security of products they rely on. Individuals whose information appears in such files face the standard risks associated with the exposure of credentials or personal records.

If your data was in this breach

Anyone who had an account or relationship with Open Options should review login activity on related services and update passwords where reuse is suspected. Running a free exposure scan with an email address will show whether that address has appeared in previously published breach datasets.

AICompiled with AI assistance from public sources and published under our editorial standards.