Ransomware Group: THEGENTLEMEN

VICTIM NAME: Astra Otoparts / PT[.] Inti Ganda Perdana

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the THEGENTLEMEN Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On October 3, 2025, a ransomware leak page published by a group calling itself “thegentlemen” identifies Astra Otoparts / PT. Inti Ganda Perdana as a victim. The page frames the incident as a data leak, stating that sensitive corporate information has been stolen and could be released publicly. The description characterizes the victim as an Indonesia-based manufacturing company in the automotive components sector and cites a revenue figure of 20 billion USD. It notes that PT. Inti Ganda Perdana primarily manufactures rear axles and drive shafts, highlighting a mission to be a reliable global supplier. The post does not show an explicit ransom amount, nor a clearly stated encryption status beyond the data-leak framing.

The leak page is accompanied by a substantial image gallery, with the body excerpt indicating 41 images associated with the post. These images are described only in general terms, likely representing internal documents or related visuals rather than detailed disclosures, and no specific content is explained in the summary. In line with ransomware leak patterns, the post does not present a ransom figure and appears to signal that stolen data may be released publicly or accessed by interested adversaries. The posted date serves as the event timeline anchor since no separate compromise date is provided. The victim in question remains Astra Otoparts / PT. Inti Ganda Perdana, a manufacturing company based in Indonesia.