Ransomware: thegentlemen claims LensAss Architecten (BE) — Professional Services

On August 7, 2026, the ransomware group "thegentlemen" publicly claimed responsibility for a cyberattack against LensAss Architecten, a Belgian architectural firm operating in the professional services sector. The claim was published on the ransomware live monitoring platform, indicating that the group has added the company to its victim list. This is a disclosure of a confirmed incident, not a new regulatory rule, but it triggers immediate obligations under the EU's NIS2 Directive and GDPR.

The primary affected organization is LensAss Architecten, but the broader impact extends to its clients, partners, and any third parties whose data may have been exfiltrated. As a professional services firm, it likely holds sensitive building plans, client financial records, and personal data of employees and customers. Compliance teams in similar small-to-mid-sized professional services firms across the EU should treat this as a warning that they are high-value, lower-security targets.

Compliance teams should immediately verify whether their own incident response plans are current, confirm that data breach notification procedures to supervisory authorities are ready within the 72-hour GDPR window, and assess whether their cyber insurance covers ransomware extortion. For those not directly affected, this is a prompt to review vendor risk management and ensure that business continuity plans account for ransomware-induced downtime. Finally, monitor the official source for any updates on data exfiltration scope, as this may affect cross-border data transfer obligations.