K.Propha listed by the The Gentlemen ransomware group

Overview

The Gentlemen ransomware group has listed K.Propha, a Tunisian distributor of pharmaceutical and parapharmaceutical products, on its leak site. The company serves pharmacists, private clinics and health partners. The listing appeared on 9 March 2026.

What was published

The group claims to have exfiltrated data from the distributor. The archive is expected to include customer records, supplier agreements and corporate information. At the time of analysis, the group's leak page was not reachable, so the full contents could not be verified.

Risks for affected individuals

• Healthcare partners' data may be exposed.
• Supplier records could be misused.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Business partners should verify communications through official channels. K.Propha should notify partners and staff, review its systems, and report the incident to Tunisian authorities.