All ransomware incidents
Ransomware group thegentlemen hits National Investments Company
National Investments Company — a financial services target operating in SA has been listed by the thegentlemen ransomware group on 2026-11-11. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | National Investments Company |
|---|---|
| Threat Group | thegentlemen |
| Summary | National Investments Company, a financial services organization in Saudi Arabia, was listed by the thegentlemen ransomware group on its leak site on 2026-11-12. |
| Date of Breach | 2026-11-11 |
| Discovery Date | 2026-11-12 |
| Region | SA |
| Target Domain | ninv.com |
| Business Sector | Financial Services |
| Severity | MEDIUM |
Claim by thegentlemen
ninv.com National Investments Company (NIC) is one of Kuwait's leading investment firms, founded in 1987 and listed on Boursa Kuwait as NINV, managing 4.3 billion dollars in assets across four segments: investment, treasury, real estate and asset management. Led by CEO Fahad Abdul Al Mukhaizim, it employs 161 people across its Kuwait City headquarters and Dubai DIFC office. In 2026 it reported net profit of KWD 10.6 million for the first 9 months with AUM reaching KWD 1.4 billion and total return of 545 percent since 2019 versus 122 percent for the Kuwait index. It executed the Trolley General Trading IPO with 15.2x oversubscription and the Ali Alghanim Sons IPO, the largest in Kuwait in over a decade. Recognized by Euromoney as Best Investment Bank in Kuwait for Equity Capital Markets three consecutive years. Its strategy targets becoming a leading regional investment firm by 2029 through international expansion, alternative investments and strategic global partnerships.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.