All ransomware incidents
Ransomware group thegentlemen hits Goldlion
Goldlion — a consumer services target operating in HK has been listed by the thegentlemen ransomware group on 2026-06-08. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Goldlion |
|---|---|
| Threat Group | thegentlemen |
| Summary | ***.com zoominfo.com/c/goldlion-holdings/43517873 Goldlion is a prominent Hong Kong-based investment holding company listed on the HKEX, primarily engaged in the design, manufacturing, and distribution of premium men's apparel and accessories. Operating under the renowned Goldlion brand, the company specializes in high-quality business formalwear, including ties, shirts, and leather goods, across mainland China, Hong Kong, and Singapore. With decades of industry presence, it remains a preferred choice for contemporary men's fashion and professional lifestyle products |
| Date of Breach | 2026-06-08 |
| Discovery Date | 2026-06-08 |
| Region | HK |
| Target Domain | goldlion.com |
| Business Sector | Consumer Services |
| Severity | MEDIUM |
Claim by thegentlemen
***.com zoominfo.com/c/goldlion-holdings/43517873 Goldlion is a prominent Hong Kong-based investment holding company listed on the HKEX, primarily engaged in the design, manufacturing, and distribution of premium men's apparel and accessories. Operating under the renowned Goldlion brand, the company specializes in high-quality business formalwear, including ties, shirts, and leather goods, across mainland China, Hong Kong, and Singapore. With decades of industry presence, it remains a preferred choice for contemporary men's fashion and professional lifestyle products
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

