INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Thegentlemen Publishes New Victim
|
2026-10-31 07:25
CRITICAL
LOW
RANSOMWARE & EXTORTION
Executive Summary
AI-generated
Some Srl, an Italian ERP and financial systems consulting company based in Milan, has been targeted by a ransomware attack. The incident occurred approximately 25 years ago, with the identified entity being ENI Congo, an oil company operating primarily in Africa and Europe. The targeted sectors include health, manufacturing, energy, and hospitality, with some.it serving international hotel chains, oil companies like ENI Congo, and mid-size manufacturers. The attackers employed exfiltration and ransomware tactics, affecting 22 employees at the company. The attack resulted in a financial loss of €2.8 million, with over 100 implementations completed across Europe and Africa prior to the incident.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
MilanMilan
Target & Sectors
EUROPE
EUROPE
AFRICA
AFRICA
healthhealth
hospitalityhospitality
energyenergy
manufacturingmanufacturing
Incident Timeline
2026/10/31
Some.it, an Italian ERP and financial systems consulting company, was indexed by a platform tracking publicly visible information posted by ransomware operators.
Click on any entity below to view its context and source!
organisation
ENI Congo
Led by Sales Director Franco Giannini and Partner Hussein Bahobeshi with 25 years of hospitality ERP expertise, it serves international hotel chains, oil companies like Mellitah and ENI Congo, and mid-size manufacturers.
victims
22 employees
With about 22 employees and revenue of 2.8 million euro, it has completed over 100 implementations across Europe, the Americas and North Africa.
financial
2.8 euro
With about 22 employees and revenue of 2.8 million euro, it has completed over 100 implementations across Europe, the Americas and North Africa.
organisation
Epicor Kinetic
Description:
some.it SOME Srl is an Italian ERP and financial systems consulting company founded in 2001 in Milan, delivering end-to-end implementations of Epicor Kinetic, Infor SunSystems and Fluentis ERP for manufacturing, hospitality and oil and gas clients.
organisation
ERP
The company operates both as a system designer building ERP architectures and as a local specialist adapting global models to Italian fiscal and regulatory requirements.
organisation
DNS
The following DNS records were found for the victim's domain.
Tactical Metrics
Metrics
victims
22
Employees
Click for context!
With about 22 employees and revenue of 2.8 million euro, it has completed over 100 implementations across Europe, the Americas and North Africa.
Metrics
financial
2,800,000
Euro
With about 22 employees and revenue of 2.8 million euro, it has completed over 100 implementations across Europe, the Americas and North Africa.
Intelligence Sources
Ransomware Live
2026-10-31
🏴☠️ Thegentlemen has just published a new victim : SOME
Ransomware Live
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-10-31T11:40
Comprehensive Tactical Telemetry
Highly Correlated Entities
4x
organisation
Identified Entity
ENI Congo
entity
4x
industry
Targeted Sector
Health
sector
2x
target region
Target Country
Congo
country
2x
timeline
Temporal Reference
25 years
date
2x
tactic
Cyber Operation Type
Exfiltration
tactic
2x
target region
Target Region
AFRICA
region
Contextual Telemetry
Context Block
4 METRICS
victims
Employees
22
employees
financial
Euro
2,800,000
euro
general metric
Implementations
100
implementations
malware
Malware Payload
Milan
tool
Click on any entity below to view its context in the main text!
Selective Unpublish
Select the networks you want to remove this post from. The system will try to delete the real post through the API and clean the database so you can publish it again.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies. Read our Privacy Policy.