FESCO Adecco Listed by The Gentlemen Ransomware Group

On June 8, 2026, staffing and human resources provider FESCO Adecco appeared on the leak site of the ransomware group known as thegentlemen. The company, a joint venture between Beijing FESCO and the global Adecco Group, confirmed that internal files had been exfiltrated during a ransomware attack. While the exact number of individuals affected remains unknown, any current or former employees, contractors, or clients whose personal or employment records were stored in those systems may have had data exposed.

Reported Details of the Incident

Public reporting indicates the incident involved a ransomware deployment followed by data exfiltration. The leaked material consists of internal files rather than a single structured database. Thegentlemen posted evidence of the breach on their leak site, as tracked by ransomware.live. No specific volume of records or detailed list of exposed data types has been publicly itemized beyond the broad category of internal company documents. FESCO Adecco has not yet released a formal notification detailing the precise scope, though the presence on the leak site states that negotiations or payment demands failed to prevent publication.

Why This Matters for You and Your Family

If you have ever worked with FESCO Adecco, used their staffing services, or had payroll, tax, or employment records processed through them, your information could be in the hands of criminals. HR and payroll files frequently contain full names, national ID numbers, addresses, bank details, salary history, and contact information for family members. Once such data leaves a company’s control, it can be sold, traded, or used to launch targeted fraud, identity theft, or phishing campaigns against you or your household. Even if you are not certain your records were involved, the uncertainty itself creates stress that lasts for years.

The Doxxing and Identity-Chain Risks

Stolen HR records rarely stay isolated. Criminals combine them with other leaks to build detailed profiles that link your work email, personal phone number, home address, and family relationships. These identity chains often extend to children’s accounts. A parent’s corporate login reused at a gaming platform, for example, can give attackers access to a child’s username, chat history, and linked email. From there, doxxing escalates quickly: public shaming, swatting, or extortion become realistic threats. Credential leaks like this one routinely cascade into account takeovers precisely because people reuse passwords across work, personal, and gaming services.