ACAM Systemautomation Breached by TheGentlemen

Austrian automation technology firm ACAM Systemautomation GmbH was breached by the threat actor known as TheGentlemen, with the incident listed on May 25, 2026. Limited public details are available on the precise number of users affected or the specific categories of data exposed. The breach adds to a growing roster of incidents involving industrial and automation-sector companies whose internal systems increasingly hold employee, partner, and customer records that can be repurposed for identity fraud and targeted attacks.

Public reporting indicates the breach was discovered and catalogued on the same day it appeared in threat-actor channels. Available reporting describes the actor as TheGentlemen, a group previously linked to opportunistic intrusions across European mid-market firms. At the time of writing, neither the company nor independent researchers have released a detailed notification specifying the volume or exact nature of the compromised information. Industry research from sources such as DoxxScan™ continuous monitoring indicates that even partial leaks from business-to-business service providers frequently include email addresses, usernames, hashed credentials, and internal account metadata that later surface in criminal marketplaces.