All ransomware incidents
Ransomware group thegentlemen hits SBI Audiovisual Medinbox
SBI Audiovisual Medinbox — a healthcare target operating in ES has been listed by the thegentlemen ransomware group on 2026-10-14. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | SBI Audiovisual Medinbox |
|---|---|
| Threat Group | thegentlemen |
| Summary | SBI Audiovisual Medinbox, a healthcare organization in Spain, was listed by the thegentlemen ransomware group on its leak site on 2026-10-16. |
| Date of Breach | 2026-10-14 |
| Discovery Date | 2026-10-16 |
| Region | ES |
| Target Domain | sbiav.com |
| Business Sector | Healthcare |
| Severity | MEDIUM |
Claim by thegentlemen
sbiav.com SBI Audiovisuel is a Quebec AV company founded in 1991 (HQ in Saint-Bruno-de-Montarville, ~11 staff), doing corporate event production — sound, lighting, video, webcasting — plus its signature niche: live streaming of surgical operations for medical training. It deploys its own CASTER mobile system and claims exclusive North American rights to France's Medinbox tech, which is used at hospitals like Mount Sinai NY; note SBI is an integrator, not the tech's manufacturer. Public activity runs from 2018 through 2026 (US tours, medical congresses, hiring), with no lawsuits or scam signs found. Revenue is not disclosed — third-party estimates vary ($1–5M range), all unverified. Weak spots: no independent client reviews, no published certificates, and the site blurs its own brand with Medinbox's. For Quebec/Canada corporate events or live-surgery broadcasts it's a credible pick; for critical projects, verify team size, redundancy plans, and patient-data handling in writing.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.