All Souls St Gabriels School Ransomware Claim by thegentlemen (Oct 2026)

Claim Summary

On or around October 6, 2026, the ransomware group known as “thegentlemen” allegedly listed All Souls St Gabriels School (ASSG) on its dark web leak site. The entry purportedly names the school’s domain, allsouls.qld.edu.au, and describes it as an independent Anglican co-educational boarding and day school in Charters Towers, North Queensland.

According to the threat actor, the listing includes a reference to a third-party business data aggregator profile, though no specific data volume, file samples, or proof-of-compromise artifacts have been disclosed publicly. The claim remains unverified. Ransomware operators frequently publish victim names without substantive evidence in order to pressure organizations into paying.

Threat Actor Profile

The group operating as thegentlemen is a relatively low-profile ransomware outfit. At the time of writing, there is no public research available on this actor’s tooling, initial access vectors, or victimology. Its total number of known victims is unknown, and no known toolset has been attributed to it by independent researchers.

This lack of a documented track record is significant. Unlike established ransomware operations with years of leaked negotiation chats and forensic reports, thegentlemen has not been independently profiled. That means we cannot assess whether the group reliably encrypts systems, exfiltrates data, or simply posts names to generate leverage. No YARA rules or detection signatures specific to this group are publicly available. Defenders should rely on generic ransomware detection guidance: monitor for unusual data staging, mass file encryption behavior, and anomalous outbound transfers.

Alleged Data Exposure

The leak site entry allegedly references the school’s public domain and a ZoomInfo business profile. ZoomInfo is a commercial data aggregator that compiles publicly available business contact information. Referencing it does not demonstrate access to internal systems, student records, or financial data.

No data volume has been disclosed. No samples, screenshots, or file trees have been published. The claim does not specify whether the alleged exposure involves student records, staff information, financial systems, or board communications. Given the school’s profile, including roughly 431 to 459 students and 186 to 200 boarders, any genuine breach of student data would carry serious privacy implications under Australian law. However, at this stage, there is no evidence to support that scenario.

Potential Impact

If the claim were substantiated, potential impacts could include disruption to school operations, exposure of personal information belonging to students, families, and staff, and reputational harm. Australian educational institutions are subject to the Privacy Act 1988 and the Notifiable Data Breaches scheme, which would require notification to affected individuals and the Office of the Australian Information Commissioner if a serious data breach occurred.

That said, the absence of any disclosed data volume or samples makes a material breach difficult to assess. The claim may amount to little more than name-and-shame pressure tactics.

What to Watch For

• Any official statement from All Souls St Gabriels School or its governing board.
• Notification from the Office of the Australian Information Commissioner, if applicable.
• Publication of data samples by the group, which would raise credibility.
• Whether the listing is removed, updated, or left to expire, a common pattern for unsubstantiated claims.
• Similar listings by thegentlemen targeting other Australian organizations.

Disclaimer

This report is based solely on an unverified claim published by a ransomware group. Yazoul Security has not independently confirmed the breach, the authenticity of any data, or the accuracy of the group’s statements. Ransomware actors routinely exaggerate or fabricate claims. Nothing here should be treated as confirmation that All Souls St Gabriels School experienced a security incident. Affected parties should await official confirmation.