Threat actor “thegentlemen” allegedly exfiltrated 531+ GB of NDA files, HR and employee data, technical drawings/models, bank statements, tax/legal documents, confidential materials, passport scans, VIP client data, and more from G R Infraprojects in India. The breach claim impacts #India
Incident Details
- Victim: G R Infraprojects
- Sector: Manufacturing
- Country: IN
- Actor: thegentlemen
- Source:
- Discovered: 2026-08-30T09:54:19.716946+00:00
- Published: 2026-08-28T16:48:29+00:00
Information
- Over 531 GB of data was allegedly stolen, including NDA files, HR records, user and employee data, technical drawings, models, bank statements, tax and legal documents, confidential files, work photos, screenshots, passport scans, VIP client data, and more.
- The company is an Indian integrated infrastructure EPC firm founded in 1995, with headquarters in Udaipur and Gurugram.
- Its operations include roads, highways, bridges, metros, railways, tunnels, ropeways, and power transmission lines across more than 23 Indian states.
- The organization employs around 10,000 people and has an order book of approximately ₹19,000+ crore ($2.3 billion).
- Projects are executed under EPC, BOT, HAM, and BOOT models, supported by in-house manufacturing capabilities and a fleet of about 7,500 equipment units.
- The company has been listed on BSE and NSE since July 2021 under the ticker GRINFRA and holds CRISIL AA / CARE AA+ stable ratings.
Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.