Ransomware group thegentlemen hits MoneyGram
MoneyGram — a financial services target operating in US has been listed by the thegentlemen ransomware group on 2026-10-10. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | MoneyGram |
|---|---|
| Threat Group | thegentlemen |
| Summary | moneygram.com Revenue $2.1 Billion MoneyGram global money transfer network moving nearly $200 billion a year through almost 500,000 retail agent locations in 200+ countries and serving 60 million+ active customers, with over 70% of transactions now digital. It earns mainly from transfer fees plus currency exchange spreads, not from owning stores, since almost all locations are partner agents like post offices and grocery chains. In 2025 it cut 449 jobs to speed up digital growth and in 2026 launched its own MGUSD dollar stablecoin and a Visa card that spends digital dollars anywhere Visa works. MoneyGram owns no factories or stores, it is a licensed money transmitter with 75+ regulatory approvals, around 2,000 employees in 36 countries, and was taken private in 2023 for $1.8 billion. |
| Date of Breach | 2026-10-10 |
| Discovery Date | 2026-10-12 |
| Region | US |
| Target Domain | moneygram.com |
| Business Sector | Financial Services |
| Severity | MEDIUM |
Claim by thegentlemen
moneygram.com Revenue $2.1 Billion MoneyGram global money transfer network moving nearly $200 billion a year through almost 500,000 retail agent locations in 200+ countries and serving 60 million+ active customers, with over 70% of transactions now digital. It earns mainly from transfer fees plus currency exchange spreads, not from owning stores, since almost all locations are partner agents like post offices and grocery chains. In 2025 it cut 449 jobs to speed up digital growth and in 2026 launched its own MGUSD dollar stablecoin and a Visa card that spends digital dollars anywhere Visa works. MoneyGram owns no factories or stores, it is a licensed money transmitter with 75+ regulatory approvals, around 2,000 employees in 36 countries, and was taken private in 2023 for $1.8 billion.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
moneygram.com
Leak post (onion / Tor)
http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/#MoneyGram
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.