All ransomware incidents
Ransomware group thegentlemen hits Cherry Bekaert
Cherry Bekaert — a professional services target operating in US has been listed by the thegentlemen ransomware group on 2026-10-28. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Cherry Bekaert |
|---|---|
| Threat Group | thegentlemen |
| Summary | Cherry Bekaert, a professional services organization in the United States, was listed by the thegentlemen ransomware group on its leak site on 2026-10-31. |
| Date of Breach | 2026-10-28 |
| Discovery Date | 2026-10-31 |
| Region | US |
| Target Domain | cbh.com |
| Business Sector | Professional Services |
| Severity | MEDIUM |
Claim by thegentlemen
cbh.com Revenue $446.7 Million CBH Group Australia's largest grain cooperative, founded in 1933 in Perth and owned by over 3,700 farmer shareholders across Western Australia. It operates the world's largest grain export network with around 200 receival sites, 20 million tons of storage capacity and four export terminals at Kwinana, Albany, Geraldton and Esperance. Each year it handles approximately 20 million tons of grain and exports 15 to 17 million tons, mainly wheat, barley and canola to Asia, the Middle East and beyond. Led by CEO Brendan White, it has invested over 2 billion dollars in infrastructure modernization including rail upgrades, solar energy and digital platforms like the CBH App. The cooperative is financially strong with a BBB credit rating and returns profits to farmers through patronage dividends. It operates its own rail fleet of 360 wagons, runs quality testing laboratories at every site and is expanding port capacity to load Panamax vessels at Kwinana and Albany.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.