Ransom! Glassdoor (AUG-2026)
The ransomware claim alleges that threat actor thegentlemen targeted Glassdoor (glassdoor.com), a major U.S. employment and company-review platform owned by Recruit Holdings/Indeed, to disrupt access to its services. The platform underpins millions of anonymous employee reviews, salary data, and job listings, with an annual “Best Places to Work” program, impacting U.S.-based operations and users. #UnitedStates

Incident Details

  • Victim: Glassdoor
  • Sector: Professional Services
  • Country: US
  • Actor: thegentlemen
  • Source:
  • Discovered: 2026-08-30T09:54:40.518344+00:00
  • Published: 2026-08-28T16:44:33+00:00

Information

  • A U.S. job platform founded in 2007 that lets employees anonymously review companies, covering culture, salaries, and management.
  • It is owned by Recruit Holdings/Indeed, acquired for $1.2 billion in 2018 and legally merged into Indeed on July 1, 2026.
  • The platform hosts millions of reviews for roughly 600,000 companies, along with salary data and job listings.
  • It is free for job seekers and monetized through employer branding tools.
  • It also publishes the annual “Best Places to Work” awards.

Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live