Ransom! ARMONIA MEDICAL S.A.S.

ARONIA MEDICAL S.A.S. was targeted by the threat actor thegentlemen, who claimed to have encrypted sensitive data belonging to the company. The incident affects Colombia.

Incident Details

  • Victim: ARMONIA MEDICAL S.A.S.
  • Country: CO
  • Actor: thegentlemen
  • Source: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
  • Discovered: 2025-09-17 16:52:23.446790
  • Published: 2025-09-17 16:27:31.000000

Information

  • The company is based in Colombia, with its headquarters in Santa Marta.
  • Operates in the Mobile Health Services sector.
  • Founded on February 24, 2012.
  • Provides outpatient medical practice activities.
  • Offers hairdressing and other beauty treatments.
  • Engages in retail sales of pharmaceutical, medicinal, cosmetic products, and toiletries in specialized establishments.
  • Website: https://armoniaips.com

Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live