Ransomware Group The Gentlemen Claims Attack on Bi-Link Precision Manufacturer
A ransomware gang has listed Bi-Link, a US metal-stamping and plastics manufacturer based in Bloomingdale, Illinois, on its dark-web pressure site. The company has not confirmed any incident.
Key points
- The Gentlemen listed Bi-Link, a precision manufacturer headquartered in Bloomingdale, Illinois, on 31 October 2026, according to monitoring service Ransomware.live.
- Bi-Link has not publicly confirmed any breach, and the claim could not be independently verified at publication.
- The group's post references the company's reported acquisition by Taiwan-listed Donpon Precision, consolidated from January 2026, a corporate change that may affect who handles any incident response.
- The group's post claims the company operates plants in China, Mexico and Vietnam.
- Manufacturing is the sector most frequently targeted in The Gentlemen's claimed victims, according to Threat Vectr's own tracking.
What exactly is being claimed?
The Gentlemen, a ransomware group that runs a dark-web site to pressure companies into paying, has listed Bi-Link among its alleged victims. Ransomware is malicious software criminals use to lock a company's systems and demand payment to restore access. Groups like this one also threaten to publish stolen data if the ransom goes unpaid, which is why they post listings naming targets publicly.
The listing, first observed by Ransomware.live on 31 October 2026, describes Bi-Link as a precision manufacturer founded in 1961, producing metal stampings and injection-moulded plastics for automotive and medical customers among others. Listings of this kind are written by attackers to establish credibility and apply pressure. They're sometimes exaggerated and occasionally false entirely.
Does the corporate ownership picture matter here?
It may complicate things considerably. The group's post notes that Bi-Link's long-standing family ownership ended when Taiwan-listed Donpon Precision agreed to acquire the company in October 2025, with the deal closing and consolidating from January 2026. If accurate, that means any incident response and legal notification obligations now fall to Donpon rather than the original founders. The post also states that long-time CEO Tom Harris has exited.
Bi-Link holds ISO 9001, ISO 13485 and IATF 16949 quality certifications, industry standards required to supply medical and automotive original equipment manufacturers. A confirmed breach affecting those supply chains would carry implications well beyond the company itself.
No public statement from Bi-Link or Donpon has appeared, and no regulatory filing confirming an incident exists.
How active is this group?
Very. We've covered The Gentlemen five times in the past 90 days, first reporting on the group on 10 June 2026. Manufacturing companies account for the largest share of the group's claimed targets in Threat Vectr's tracking. Claimed figures are unverified criminal assertions, not confirmed breaches.
Should you worry if you work with Bi-Link?
Until Bi-Link or Donpon Precision issues a public statement, treat this as unconfirmed. A few precautions still make sense.
Watch for phishing emails. Criminals send fake messages designed to trick you into handing over passwords or clicking harmful links, and they sometimes use news like this to craft convincing fakes. Be especially sceptical of anything claiming to come from Bi-Link about account security or urgent payments.
Don't reuse passwords across accounts, particularly if you use the same one for a Bi-Link supplier portal as for personal email or banking. A free password manager keeps them separate at no cost.
If you receive a phone call offering breach compensation or credit monitoring on behalf of the company, treat it as a scam until you can verify it through Bi-Link's or Donpon's official published contact details.
