The Gentlemen ransomware claims breach of SoftwareOne Türkiye
The Gentlemen ransomware group listed SoftwareOne Türkiye, the Istanbul arm of Swiss provider SoftwareOne, on its leak site on Oct 26, 2026. No details on the volume or type of data allegedly taken have been shared, SoftwareOne has not confirmed a cyber incident, and the claim is unverified. Customers should await an official statement and stay alert to phishing.
What happened
The Gentlemen ransomware group listed SoftwareOne Türkiye, the Turkish arm of Swiss software and cloud provider SoftwareOne, on its leak site. The listing appeared on Oct 26, 2026. SoftwareOne has not publicly confirmed a cyber incident and the claim is unverified.
Why it matters
SoftwareOne Türkiye serves large Turkish enterprises with licensing, cloud and security services, per DailyDarkWeb. If authentic, customer environments could face follow-on phishing and supply-chain risk. No data exposure has been confirmed so far.
What to do
Await an official statement from SoftwareOne and monitor the company's channels. Warn staff about phishing referencing SoftwareOne and review interactions with the Turkish arm.
For the technical team
- Affected
- SoftwareOne Türkiye (braço turco do provedor suíço SoftwareOne) · SoftwareOne Türkiye, the Istanbul arm of Swiss provider SoftwareOne, per the group's listing.
- Exploitation
- Unverified claim reported by DailyDarkWeb. Listing on The Gentlemen ransomware leak site, with no details on the volume or type of data. SoftwareOne has not publicly confirmed a cyber incident affecting its Turkish operations.
- Fix
- Not applicable; no product or fixed version involved.
- More details
- The listing appeared on Oct 26, 2026 (UTC). DailyDarkWeb notes this is a threat-actor claim, not confirmation of a breach, and that if authentic, customer environments could face follow-on phishing and supply-chain risk.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
