All ransomware incidents
Ransomware group thegentlemen hits Marie Kruses Skole
Marie Kruses Skole — a education target operating in DK has been listed by the thegentlemen ransomware group on 2026-10-26. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Marie Kruses Skole |
|---|---|
| Threat Group | thegentlemen |
| Summary | Marie Kruses Skole, a education organization in Denmark, was listed by the thegentlemen ransomware group on its leak site on 2026-10-31. |
| Date of Breach | 2026-10-26 |
| Discovery Date | 2026-10-31 |
| Region | DK |
| Target Domain | mks.dk |
| Business Sector | Education |
| Severity | MEDIUM |
Claim by thegentlemen
mks.dk Marie Kruses Skole is a private school in Farum, Denmark, founded in 1869 by education pioneer Marie Kruse, offering a full track from kindergarten through gymnasium STX to about 1100 students. It is the only free primary school and the only gymnasium in Furesø Kommune, employing 107 people and led by rektor Carsten Gade. The school runs 8 gymnasium study lines including Biotek, Mat-Fys, sports, business, super languages and music, plus unique programs like Kruse Elitesport and diving. Revenue in 2024 reached 109.5 million Danish kroner with a 1.4 million profit, backed by 68 percent state subsidy and a stable surplus for 5 straight years. Tuition is 2190 kroner per month with financial aid available, and it attracts over 1100 students on its waiting list. Its key strengths are 157 years of heritage, top national exam results and free admissions independent of municipal student distribution rules.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.