The Gentlemen Ransomware Group Posts MicroPhase Corp and Promatrix on Leak Site July 30 as Group Sustains Neck-and-Neck Pace with Qilin for Top 2026 Ransomware Volume

Leak site monitoring captured The Gentlemen posting two fresh victims on July 30 — MicroPhase Corporation (defense-sector IT) and Promatrix Corp (IT consulting/software services) — continuing the group's aggressive mid-2026 expansion that has produced nearly 300 claimed victims in Q2 alone, rivaling Qilin for the top spot in 2026 ransomware volume. Ransomware disclosures globally rose approximately 20% year-over-year through H1 2026 alongside a 74% quarter-over-quarter spike in attacks against billion-dollar enterprises, with The Gentlemen and Qilin analysts describing as a rivalry-fueled escalation cycle. MicroPhase's classification as a defense electronics contractor elevates the national security sensitivity of the disclosure; neither organization has issued a public statement as of July 31.

MicroPhase's classification as a defense electronics contractor elevates the national security sensitivity of the disclosure; neither organization has issued a public statement as of July 31.

This intelligence brief has been compiled from open-source reporting and corroborated across multiple threat intelligence sources. Defenders should treat the high severity rating as a guide to prioritization within their environment.

For the latest indicators of compromise, formatted SIEM queries, and unredacted actor intelligence related to this brief, DMZ Operator subscribers receive automated IOC packages via email the moment new advisories are published.