All ransomware incidents
Ransomware group thegentlemen hits Coemi Imóveis
Coemi Imóveis — a retail & e-commerce target operating in BR has been listed by the thegentlemen ransomware group on 2026-11-02. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Coemi Imóveis |
|---|---|
| Threat Group | thegentlemen |
| Summary | Coemi Imóveis, a retail & e-commerce organization in Brazil, was listed by the thegentlemen ransomware group on its leak site on 2026-11-05. |
| Date of Breach | 2026-11-02 |
| Discovery Date | 2026-11-05 |
| Region | BR |
| Target Domain | coemi.com.br |
| Business Sector | Retail & E-Commerce |
| Severity | MEDIUM |
Claim by thegentlemen
coemi.com.br Coemi Imóveis is a Brazilian real estate agency founded in 1985 in Brasília with 41 years of experience in buying, selling, renting and property management across the Federal District and Goiás state. It operates three offices including its Asa Norte headquarters, an Águas Claras branch and a new Goiânia unit opened in 2023, with 18 to 33 employees and a portfolio of over 1,500 rental properties. The company is an official correspondent of Caixa Econômica Federal for mortgage financing and a member of the Rede Brasília de Imóveis network. Its services cover personalized sales consulting, rental management with differentiated payment options, property evaluation and legal support through to notarial closing. It runs a free online property valuation tool and actively publishes market guides for Brasília neighborhoods. Led by a single owner and registered under Simples Nacional as a small enterprise with R$78,800 in share capital.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.