ARONIA MEDICAL S.A.S. was targeted by the threat actor thegentlemen, who claimed to have encrypted sensitive data belonging to the company. The incident affects Colombia.
Incident Details
- Victim: ARMONIA MEDICAL S.A.S.
- Country: CO
- Actor: thegentlemen
- Source: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
- Discovered: 2025-09-17 16:52:23.446790
- Published: 2025-09-17 16:27:31.000000
Information
- The company is based in Colombia, with its headquarters in Santa Marta.
- Operates in the Mobile Health Services sector.
- Founded on February 24, 2012.
- Provides outpatient medical practice activities.
- Offers hairdressing and other beauty treatments.
- Engages in retail sales of pharmaceutical, medicinal, cosmetic products, and toiletries in specialized establishments.
- Website: https://armoniaips.com

Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.