cyfenced.com →

[ Ransomware claim · thegentlemen · 24 Oct 2026 ]

Penco Products

The ransomware group thegentlemen named Penco Products (United States) on its leak site on 24 Oct 2026. This is the group's own claim: it has not been verified by Cyfenced or Ransomware.live, and some claims turn out to be exaggerated, recycled or false.

Not confirmed so farManufacturing

[ Status ]Has the attack been confirmed?

We have found no statement from Penco Products and no press report of an attack so far. Until the organisation says something, treat the listing as an unproven claim, but stay alert to the phishing such claims are used for.

[ The organisation ]Who is Penco Products?

What it does
Penco Products is an American manufacturer of steel lockers, shelving, pallet racks, garment dispensers and other storage and material handling equipment. The company traces its roots to the Penn Metal Corporation of Pennsylvania, which first made steel culvert pipe in Philadelphia, and took the Penco name in the 1950s.
Based in
Greenville, North Carolina, United States
Founded
1869
Size
a manufacturing plant of about 375,000 square feet in Hamilton, North Carolina
Who it serves
Schools, gyms and team rooms, healthcare facilities, first responders, government buyers and workplaces, largely through distributors and design professionals.

Partners and customers it names publicly

  • US General Services Administration (GSA), Federal Supply Schedule contract holder
  • IMC-Industrial Manufacturing Company, Related company linked from Penco's website

[ Impact ]Who could be affected

Distributors, schools and other buyers could see delays to quotes, orders and deliveries of lockers and shelving if production or ordering systems were disrupted. If the claim is genuine, business contact details, order records or employee information could be exposed, and partners could be targeted with invoice or payment fraud.

In manufacturing generally: Production stops ripple down the supply chain to customers waiting for parts and products, and groups often take design files and supplier contracts.

[ The attacker ]About thegentlemen

The Gentlemen is a ransomware-as-a-service group that emerged in mid-2025 and uses double extortion, stealing data before encrypting systems. Trend Micro found it disabling security tools with a vulnerable driver and gaining access through internet-facing systems such as firewalls or compromised accounts, with manufacturing among its most affected sectors.

thegentlemen has claimed 159 organisations in the last 30 days, most in United States, United Kingdom and Germany, and mostly in healthcare, manufacturing and technology. We wrote about the group in Fifty victims in a day, two hosting breaches and town halls offline.

thegentlemen on Ransomware.live

Other organisations thegentlemen has named

[ What to do ]If you are a customer, partner or neighbour

  1. Confirm any request to change Penco bank or payment details by calling a known contact before paying an invoice.
  2. Distributors and buyers should check the status of open orders and deliveries directly with Penco.
  3. Be cautious with unexpected emails or attachments that appear to come from Penco or relate to recent orders.
  4. Review shared accounts or portal access with Penco and change passwords if the same credentials are used elsewhere.
Researched with AI from the sources on this page on 26 Oct 2026. Facts can change: check the organisation's own announcements.

[ Similar claims ]Other manufacturing organisations in United States