HackerFeeds
All ransomware incidents
empty.es

Ransomware group thegentlemen hits Empty

MEDIUM
·Not Found·ES·2026-06-08

Empty — a not found target operating in ES has been listed by the thegentlemen ransomware group on 2026-06-08. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target OrganizationEmpty
Threat Group
thegentlemen
Summary***.es zoominfo.com/c/empty/439336503 Empty is a prominent Spanish construction and architecture firm headquartered in Madrid, specializing in the execution of complex architectural, museum, and exhibition projects. With a team of over 50 professionals and offices in Madrid, Barcelona, and Paris, the company excels in mobilizing technical resources to deliver high-profile builds, such as the Spanish Pavilion at Expo Dubai 2020 and BBVA’s "La Vela" headquarters. Founded with the vision of redefining the construction industry, Empty acts as a comprehensive partner for drafting and executing large-scale, sophisticated structures
Date of Breach2026-06-08
Discovery Date2026-06-08
RegionES
Target Domainempty.es
Business SectorNot Found
Severity
MEDIUM

Claim by thegentlemen

***.es zoominfo.com/c/empty/439336503 Empty is a prominent Spanish construction and architecture firm headquartered in Madrid, specializing in the execution of complex architectural, museum, and exhibition projects. With a team of over 50 professionals and offices in Madrid, Barcelona, and Paris, the company excels in mobilizing technical resources to deliver high-profile builds, such as the Spanish Pavilion at Expo Dubai 2020 and BBVA’s "La Vela" headquarters. Founded with the vision of redefining the construction industry, Empty acts as a comprehensive partner for drafting and executing large-scale, sophisticated structures

Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.