Amv International Development SA, a civil engineering construction company based in Bucaramanga, Colombia, reported a ransomware attack allegedly launched by the threat actor “thegentlemen,” impacting their operations. The incident affected their US operations, highlighting cybersecurity vulnerabilities in companies operating across multiple countries. #Colombia #US
Incident Details
- Victim: Amv International Development
- Country: US
- Actor: thegentlemen
- Source: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
- Discovered: 2025-09-09 15:55:40.280055
- Published: 2025-09-09 15:54:53.967194
Information
- Ransomware attack targeted Amv International Development.
- Operates in the Civil Engineering Construction industry.
- Employs between 250 to 499 people.
- Revenue ranges from 10 million to 25 million USD.
- Headquartered in Bucaramanga, Santander, Colombia.

Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.