Pacific Holdings Group JSC. Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On November 23, 2025, Pacific Holdings Group JSC. was listed by the ransomware group thegentlemen. The listing states that internal files were exfiltrated during a ransomware attack. No figure has been released for the number of people whose information may be involved, and the company has not confirmed the incident or provided further details. The practical implications center on records held by a healthcare operator that runs dental and medical clinics serving patients across multiple Vietnamese cities. Any exposure of internal files could affect individuals who have received care or whose administrative data is stored by the organization.

Inside the incident

The only confirmed public information is the November 23, 2025 listing and the statement that internal files were taken in a ransomware operation. No data volume, file categories, or timeline of the attack has been disclosed. It is not known whether the files were published, offered for sale, or used in any further activity.

The group behind it: thegentlemen

Thegentlemen is a ransomware group that maintains a leak site where it lists organizations it claims to have targeted. Like other groups of this type, it typically combines encryption of systems with the removal of data, then uses the threat of publication to pressure victims. Public records show the group has listed entities in various sectors in prior incidents, though each listing remains an unverified claim until independently confirmed.

About Pacific Holdings Group JSC.

Pacific Holdings Group JSC. is a Vietnam-based healthcare company that operates Kim Dental, described as the country’s largest dental clinic chain with 26 locations, along with Pacific Polyclinic for outpatient medical services and Pacific Chiropractic Clinic for physiotherapy and related care. The network spans Ho Chi Minh City, Hanoi, and other provinces. Organizations in this sector routinely maintain appointment records, treatment histories, billing information, and staff files.

What data was at risk

The listing refers only to “internal files exfiltrated.” No inventory of specific data types has been released. Healthcare providers of this kind commonly hold patient identifiers, clinical notes, insurance details, and employee records, but the exact contents of the claimed exfiltration remain unconfirmed.

What's at stake

Individuals whose records may be involved face the possibility that personal or medical information could circulate without their knowledge. For the organization, the incident adds operational disruption and potential regulatory scrutiny typical of healthcare data incidents. No evidence of subsequent misuse has been reported in connection with this listing.

Were you affected?

Check any communications from Pacific Holdings Group JSC. or its clinics for official notices. Review bank and insurance statements for unusual activity. A free exposure scan of your email address against known breach data can indicate whether your information has appeared in previously published datasets, though it cannot confirm involvement in this specific incident.

AICompiled with AI assistance from public sources and published under our editorial standards.