All ransomware incidents
Ransomware group thegentlemen hits Betopia Group
Betopia Group — a other target operating in CY has been listed by the thegentlemen ransomware group on 2026-10-26. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Betopia Group |
|---|---|
| Threat Group | thegentlemen |
| Summary | Betopia Group, a other organization in Cyprus, was listed by the thegentlemen ransomware group on its leak site on 2026-10-31. |
| Date of Breach | 2026-10-26 |
| Discovery Date | 2026-10-31 |
| Region | CY |
| Target Domain | betopiagroup.com |
| Business Sector | Other |
| Severity | MEDIUM |
Claim by thegentlemen
betopiagroup.com Betopia Group Betopia Group is a Bangladeshi tech holding based in Dhaka, formally created in July 2025 by consolidating 22 business units including Bdcalling IT, Softvence, Sparktech, JVAI and Zencore, claiming 5,000 employees and 36 million dollars in annual revenue. Founded by Muhammad Monir Hossain, who went from freelancing on oDesk in 2013 to launching Bdcalling IT in 2017 with just 500,000 taka and 7 people, the group now serves clients in over 80 countries with 80 to 90 percent of business from the United States. Its units span software development, AI, cloud infrastructure via ZenexCloud, Odoo ERP implementation, renewable energy through PulseGrid and IT education. In July 2026 the group unveiled Vision 2030, planning to double its workforce and build Betopia City, an AI-powered smart tech hub in Bangladesh. The company is embroiled in a major scandal, with Fiverr suspending around 300 accounts linked to Betopia for coordinated marketplace manipulation.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.