The Gentlemen ransomware claims FPT Software attack; no proof published
The Gentlemen ransomware group added FPT Software, Vietnam's largest IT services and software outsourcing company, to its leak site, according to DailyDarkWeb. The group has published no proof samples and has not stated how much data it allegedly stole; FPT Software has not commented and there is no public incident notice. The claim is unverified; FPT clients should review vendor access and rotate shared credentials.
What happened
A ransomware group claimed an attack on FPT Software, Vietnam's largest IT services and software outsourcing company, by adding it to its leak site. FPT Software is part of FPT Corporation and serves more than 1,000 clients, including Fortune Global 500 firms. The claim is unverified: there are no proof samples, no comment from the company and no public incident notice.
Why it matters
If confirmed, the case could expose source code, credentials and access to client environments in automotive, banking, healthcare and energy. FPT builds and runs client systems and employs more than 33,000 people across about 30 countries, which creates supply-chain risk for its customers. At this point, it is a claim with no published proof.
What to do
Review which access FPT Software holds to company environments and rotate shared credentials. Watch for phishing attempts that use real project details. Wait for an official statement from FPT before drawing conclusions.
For the technical team
- Affected
- FPT Corporation FPT Software (maior empresa de serviços de TI e outsourcing de software do Vietnã) · FPT Software, an IT services and software outsourcing company, part of FPT Corporation. No specific product or version mentioned.
- Exploitation
- Ransomware claim posted on the The Gentlemen group's leak site and reported by DailyDarkWeb on X. No proof samples seen, no information on data volume and no technical exploitation report. FPT Software has not commented and there is no public incident notice.
- Fix
- No fix applicable. Mitigations cited by DailyDarkWeb for FPT clients: review vendor access, rotate shared credentials and watch for phishing that uses real project details.
- More details
- FPT Software employs more than 33,000 people across about 30 countries and builds and runs systems for over 1,000 clients, including Fortune Global 500 firms in automotive, banking, healthcare and energy. DailyDarkWeb notes that IT outsourcers are supply-chain targets: source code, credentials and access to client environments are worth more to attackers than the vendor's own records. Incident opened on 2026-10-27 from the post on X.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb



