Open Options Listed by thegentlemen Ransomware Group

On July 10, 2026, the ransomware group known as thegentlemen listed Open Options on its leak site, claiming that internal files had been exfiltrated from the Texas-based software company during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates the incident involved internal files stolen from Open Options, a company known for its DNA Fusion platform used in physical security and identity management systems. The data was posted to the group’s leak site hosted on ransomware.live. Affected users remain unknown at this time, and no specific volume of records has been disclosed. The company had been acquired prior to the breach, with its technology and brand integrated into Acre Security, where it continues as DNA Fusion by Acre Security.

Why This Matters for You and Your Family

When a security software provider like Open Options suffers a breach, the exposed internal files can contain details that link corporate systems to the personal information of employees, contractors, and even customers. If your workplace, school, or community organization used DNA Fusion for access control, your name, contact information, or access credentials may now sit in files controlled by attackers. For ordinary families this means heightened risk of identity theft, phishing campaigns tailored to your daily routines, and potential unauthorized access to buildings or accounts tied to those systems. Credential leaks like this one often spread far beyond the original victim company.

The Doxxing and Identity-Chain Implications

Stolen internal files frequently include spreadsheets, configuration documents, and email archives that connect email addresses, usernames, phone numbers, and physical addresses. Attackers can chain this information with data from previous breaches to build complete profiles. A single exposed work email can lead to personal accounts, social-media handles, and even children’s online profiles. Public reporting shows these chains frequently result in doxxing, where private details are published to harass or extort families. Gaming accounts belonging to you or your children are especially vulnerable because the same passwords or recovery emails are often reused across work and home environments.

Thegentlemen’s Publicly Known Track Record

Public reporting attributes thegentlemen with emerging in recent years as a ransomware operation that combines data theft with extortion. The group has targeted organizations across multiple sectors, posting victim data on dedicated leak sites when ransom demands are not met. Their typical playbook involves initial access through common vulnerabilities or phishing, followed by exfiltration of sensitive files and deployment of ransomware. They then pressure victims with deadlines for payment, threatening to release the stolen data publicly. Exact prior victim counts and timelines remain limited in open sources, but the group’s consistent use of leak sites matches patterns seen in other mid-tier ransomware actors.

What to do

• Run a DoxxScan to map every link between your work emails, personal handles, phone numbers, and real-world identity so hidden connections surface immediately.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours rather than months.
• Rotate any password you used at Open Options or DNA Fusion anywhere else it appears, then switch to 2FA through an authenticator app instead of text messages.
• Cover the entire household with DoxxScan family protection that includes dependents and children’s gaming accounts, which often chain back to the same addresses or recovery details leaked in incidents like this.
• Let remediation specialists handle takedown requests for any exposed personal information found on data broker sites or underground forums.

The incident underscores that even after a company is acquired and rebranded, its historical data can still endanger the people who relied on its products. Starting with a clear picture of your current exposure is the most practical step you can take today. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage extends to children’s gaming accounts that frequently become targets once credential leaks cascade into full doxxing chains.