All ransomware incidents
Ransomware group thegentlemen hits WABAG
WABAG — a energy & utilities target operating in IN has been listed by the thegentlemen ransomware group on 2026-10-26. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | WABAG |
|---|---|
| Threat Group | thegentlemen |
| Summary | WABAG, a energy & utilities organization in India, was listed by the thegentlemen ransomware group on its leak site on 2026-10-31. |
| Date of Breach | 2026-10-26 |
| Discovery Date | 2026-10-31 |
| Region | IN |
| Target Domain | wabag.in |
| Business Sector | Energy & Utilities |
| Severity | MEDIUM |
Claim by thegentlemen
wabag.in VA Tech WABAG is the world's leading pure-play water technology company, founded in 1924 and headquartered in Chennai, India, operating in over 25 countries with 2000 engineers and over 1500 plants delivered. Listed on NSE and BSE, it posted record FY2026 revenue of 3944 crore rupees with PAT of 371 crore and has been net cash positive for 6 straight years with a credit rating of AA minus stable. Its order book surged to an all time high of 19400 crore rupees in Q1 FY2027, over 4 times annual revenue, backed by World Bank, ADB and JICA funded projects across India, the Middle East, Africa and Southeast Asia. Key projects include Southeast Asia's largest 400 MLD desalination plant in Chennai and a 300 MLD mega desalination order in Saudi Arabia. The company holds 125 plus proprietary patents and ranks 3rd globally among private water operators and desalination suppliers per Global Water Intelligence. Led by Chairman Rajiv Mittal.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.