All Rush Listed by thegentlemen Ransomware Group

On December 24, 2025, the ransomware group known as thegentlemen added AllRush, a Calgary-based print shop, to its public leak site, claiming that internal files had been exfiltrated from the company’s systems.

What's Publicly Reported from Reporting

Public reporting indicates the incident began as a ransomware attack on AllRush, which operates as a full-service print provider offering signage, custom apparel, promotional products, and mailing services. The attackers extracted internal files before posting a notice on their dark-web leak site hosted at an onion address. No exact count of affected individuals has been disclosed, and the precise volume or sensitivity of the stolen data remains unclear from available reporting. The listing appeared on Christmas Eve 2025, a date chosen for maximum visibility. AllRush has not yet issued a public statement detailing what specific records were taken.

Why This Matters for You and Your Family

When a local business like AllRush suffers a breach, anyone whose information passed through its systems could be exposed. Customers who ordered corporate apparel, event tickets, branded signage, or direct-mail campaigns may have provided names, addresses, phone numbers, email addresses, and payment details. Employees’ payroll records, supplier contracts, and internal correspondence could also be in the hands of criminals. Once stolen data surfaces on a ransomware site, it rarely stays there; it spreads to other marketplaces and can be used for identity theft, phishing, or targeted scams against you and your family.

The Doxxing and Identity-Chain Implications

Stolen business files often contain more than isolated records. A single spreadsheet can link customer names to home addresses, phone numbers to email accounts, and work orders to personal projects. These connections allow attackers to build an identity chain that follows you from one service to another. Credential leaks from this type of incident frequently cascade into account takeovers on email, banking, or social media. Gaming accounts belonging to you or your children are especially vulnerable because kids often reuse passwords or email addresses tied to family orders. Public reporting describes how such chains lead to doxxing, harassment, and financial fraud long after the original breach is forgotten.

Thegentlemen’s Publicly Known Track Record

Public reporting attributes thegentlemen with emerging in late 2024. The group has listed dozens of organizations on its leak site, focusing primarily on small and mid-sized businesses rather than large corporations. Notable prior victims include other regional service providers whose internal documents were published after ransom demands went unpaid. Their typical playbook involves initial access through phishing or exploited remote-desktop services, followed by exfiltration of sensitive files and deployment of ransomware. If payment is not received, they publish samples and eventually the full dataset on their onion site, applying pressure through public exposure and occasional direct contact with affected parties.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at AllRush anywhere it has been reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same address or email.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites on your behalf while you focus on securing your own accounts.

The speed with which stolen business data moves from a leak site into criminal hands leaves little room for delay. Starting protective steps now can limit how far this claimed breach reaches into your life. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered online handles to real identities, and hands-on remediation by specialists who manage takedowns for you and your entire household, including children’s gaming accounts that often become the next link in a doxxing chain.