All ransomware incidents
Ransomware group thegentlemen hits Customs Support
Customs Support — a government & defense target operating in GB has been listed by the thegentlemen ransomware group on 2026-11-02. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Customs Support |
|---|---|
| Threat Group | thegentlemen |
| Summary | Customs Support, a government & defense organization in the United Kingdom, was listed by the thegentlemen ransomware group on its leak site on 2026-11-05. |
| Date of Breach | 2026-11-02 |
| Discovery Date | 2026-11-05 |
| Region | GB |
| Target Domain | customssupport.com |
| Business Sector | Government & Defense |
| Severity | MEDIUM |
Claim by thegentlemen
customssupport.com Revenue $389.4 Million IZD GmbH Europe's largest customs brokerage network, founded with headquarters in the Netherlands and operating 50 plus offices across 14 countries with over 1,600 employees. Its German subsidiary IZD GmbH is based in Duisburg, Europe's largest inland port, providing 24/7 customs clearance for automotive, electronics, pharmaceutical and e-commerce clients. Services cover import and export clearance, transit procedures, tariff classification, bonded warehousing, AEO certification and export controls. The group is backed by European private equity fund Castik Capital and serves over 5,000 clients. Its digital platform at customssupport.com offers EDI integration, real-time tracking and customs data analytics. Estimated group revenue is 300 to 500 million euro with recent additions including Brexit advisory and preferential trade consulting.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.