Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure

Bun Holding Ransomware Attack

bun.nlRansomed

threeamGroup

NetherlandsCountry

Sep 30, 2026Discovered

Overview

View group profile

Domain

bun.nl

Industry

Other

Country

Netherlands

Discovered

28 days ago

Confidence

75%

Severity

Medium

Status

Claimed

Threat group

threeam

Total victims

First seen

Nov 2025

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

Threat level

4/10

Aggressiveness8/10

Lethality0/10

Criticality3.8/10

Status breakdown

Negotiating1.6%1

Claimed

this victim

98.4%61

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Technology Transportation

Victim's position within group

Industry

Other

Known target sector

Country

Netherlands

Frequently targeted country

Other victims

View all (62)

Same group · threeam

sequoiadental.com
United States
Claimed
wyomingcountyny.gov
—
Claimed
townofnorwell.net
—
Claimed
Fleetworks Inc.
United States
Claimed
HSJ Lawyers LLP
Canada
Claimed
Jet Machined Products
—
Claimed

Group activity

Monthly attacks · threeam

total · avg 8.9/mo