Quanterm Logistics Sdn Bhd Data Breach

Quanterm Logistics Sdn Bhd, a transportation and logistics company based in Malaysia, was listed as a victim on the TheGentlemen ransomware group’s dark web portal on July 7, 2026. This incident was identified via SOCRadar’s Dark Web Monitoring service. TheGentlemen has been highly active, claiming numerous victims in the preceding 60 days, with a notable focus on the business services, manufacturing, and healthcare sectors, primarily in the United States, Germany, and India. Quanterm’s inclusion aligns with the group’s previous targeting of logistics operators, while also expanding their geographic reach into Southeast Asia.

SOCRadar’s analysis of stealer-log telemetry revealed limited exposure for the quanterm.com domain, showing a single credential pair for an external or generic account rather than direct corporate intrusion. This finding suggests a low-risk initial access path, possibly through a compromised external account, but does not definitively confirm a corporate-access route or link directly to TheGentlemen’s listing. CTI teams are advised to continue monitoring and enforce credential hygiene. TheGentlemen commonly uses infostealer-harvested credentials to gain initial access to corporate networks via Microsoft 365, VPN, or remote-access portals before deploying ransomware.

Disclaimer

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.