Grupo Tawa, a Peru-based business group, reported a ransomware incident claimed by the threat actor βthegentlemenβ, threatening to leak or block access to data unless payment is made. The company has over 18 years of experience, serves more than 2,500 clients, and employs about 15,000 individuals annually, underscoring its prominence in the region #Peru
Incident Details
- Victim: Grupo Tawa
- Sector: Not Found
- Country: PE
- Actor: thegentlemen
- Source: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
- Discovered: 2026-03-23 14:38:42.886743
- Published: 2026-03-23 09:37:17.000000
Information
- Grupo Tawa operates in Peru and Chile
- Provides comprehensive business solutions that allow clients to focus on core competencies
- Over 18 years of experience
- Services include personnel solutions, process outsourcing, cleaning, maintenance, and commercial management
- Serves more than 2,500 clients
- Employs over 15,000 individuals annually
- Positioned as a reliable partner for companies across various industries due to a commitment to excellence
- Threat actor: thegentlemen
- Website: grupotawa.com
- Profile: zoominfo.com/c/grupo-tawa/459512890

Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.