Verbux Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware crews continue to pressure organisations by posting alleged victims on leak sites, often before any independent confirmation exists. In that climate, a listing is a public claim that can alarm customers and partners even when the underlying incident remains unverified. On 26 August 2026, the group known as thegentlemen listed Verbux, a Chilean IT services firm, on its leak site. That listing is an accusation, not a claimed breach record. As of writing, Verbux has not publicly confirmed the claim.

For people who work with industrial, mining, or power-sector suppliers, or who have dealt with Verbux as a client or vendor, the practical question is what a leak-site claim does and does not establish—and what cautious steps make sense if sensitive material were ever involved. Public detail on scale, method, and contents is limited.

What the listing says

According to the listing attributed to thegentlemen, Verbux appears on the group’s leak site under reporting dated 26 August 2026. The publicly summarised material associated with the claim points to Verbux’s web presence and business profile, including references tied to verbux.com and related company directory information, and identifies the firm as Verbux Soluciones Informáticas Limitada. The listing does not, in the available facts, state how many people might be affected, name specific data categories, describe a ransom demand, or explain an intrusion method. Those points remain undisclosed in the record provided for this article.

A leak-site post is a communication tool used by extortion groups. It signals that the group wants attention and leverage; it does not by itself prove what systems were accessed, whether files left the network, or whether the material on offer is new, complete, or accurate. Until the company, a regulator, or another independent source confirms details, the responsible reading is that thegentlemen has claimed Verbux as a victim and that the company has not publicly confirmed the incident as of writing.

Who is thegentlemen?

thegentlemen is known in public reporting as a ransomware and data-extortion actor that follows a familiar double-extortion pattern: encrypt systems where possible and threaten to publish or sell alleged stolen data if payment is not made. Groups in this category typically advertise victims on dedicated leak sites, set countdown-style pressure, and mix technical disruption with reputational threat. Public coverage of such crews often notes affiliate-style operations, opportunistic targeting across regions and sectors, and marketing language on leak pages that should be treated as unverified.

None of that background converts this particular listing into confirmed fact about Verbux. For this incident, only what the facts state should be repeated: the group has listed the company, the report date is 26 August 2026, affected-person counts are unknown, and data types are not disclosed. Claims the group may make about volumes, file inventories, or internal access should be read as the group’s assertions, not as an audited inventory.

About Verbux

Verbux is a Chilean information-technology company, Verbux Soluciones Informáticas Limitada, described in public business information as operating since 2001 and headquartered in Providencia, Santiago, with presence associated with verbux.com and verbux.cl. Public descriptions place it in IT infrastructure, engineering, professional IT services, cloud computing, IoT, and SCADA-oriented process-control work for industrial, mining, and power-generation clients. Profile material associated with the listing summary also refers to a substantial body of implemented IT solutions, ranging from file servers to higher-availability data-centre environments, and notes work toward ISO 9001:2015 quality management.

Firms in this niche sit in supply chains where operational technology, industrial networks, and corporate IT often meet. A listing that names such a provider matters because clients may rely on the firm for systems that support production, monitoring, or shared infrastructure—and because partner trust depends on clarity when extortion groups make public claims. That consequence follows from the sector’s role, not from any verified finding about this case.

The information in question

The available facts state that data types named as exposed are not disclosed, and the number of people affected is unknown. It is therefore not established what, if anything, left Verbux’s environment. Asserting a specific dataset would go beyond the record.

If files were taken from an organisation of this kind, firms in industrial and mining IT services typically hold combinations of business contact data, contracts and commercial documents, project and configuration materials, credentials or access-related records used in service delivery, and technical documentation tied to client environments—including, in SCADA and IoT contexts, design or operational information that is sensitive for safety and continuity reasons. Those are sector norms, not a confirmed inventory of this listing. Exact contents remain unconfirmed, and the listing’s own marketing language about data should not be treated as a reliable catalogue.

What's at stake

For individuals, the conditional risk is familiar: if personal or work contact details were involved, phishing and social-engineering attempts can increase; if credentials or internal documents were involved, account takeover and fraud attempts can follow. For client organisations in mining, energy, or industrial operations, the conditional concern is misuse of project information, vendor access paths, or operational documentation—scenarios that can affect continuity and trust even when technical control systems themselves were never touched. None of these outcomes is established by a leak-site name alone.

For Verbux, an unverified listing still creates reputational and commercial pressure: customers ask questions, partners reassess risk, and the company must decide how to communicate while facts are incomplete. A listing establishes that a named crew chose to publicise an allegation. It does not establish negligence, confirm theft, or prove the quality of any particular security control. Readers should separate the existence of a claim from conclusions about fault or impact.

Steps worth taking either way

If you are a client, supplier, or employee who might be touched by this kind of claim, treat the situation as precautionary rather than proven. Prefer official channels from Verbux for notices; be wary of unexpected messages that cite the listing to urge urgent payments, password submission, or file downloads. If you use shared accounts or vendor portals connected to the firm, consider updating passwords and enabling multi-factor authentication where available, and review recent account activity for unfamiliar logins. Organisations that depend on Verbux for industrial or IT services may wish to confirm, through normal contract and security contacts, whether any access paths should be rotated as a routine hygiene measure—without assuming a claimed compromise.

Monitor financial and email accounts for unusual activity if you believe your details could have been held in a vendor relationship. Keep expectations realistic: public detail on this listing is thin, affected numbers are unknown, and data types were not disclosed. As a general check, readers can run a free exposure scan of their email address to see whether that address has already appeared in known breach datasets unrelated to this claim. Conditional caution is warranted; certainty is not.

AICompiled with AI assistance from public sources and published under our editorial standards.