Ransomware Group intelligence
Play
ActiveTrack Play with 1297 published victims and 4 known leak locations in a single intelligence view.
Overview
Play is tracked by Breach House as a ransomware group with 1297 published victims.
United States is currently the most targeted country in this dataset.
4 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (4)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion |
| Leak location 2 | Onion service | Unknown | k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion |
| Leak location 3 | Onion service | Unknown | mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion |
| Leak location 4 | Onion service | Unknown | j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (1297)
Search, filter and paginate the victim timeline for Play. Showing 1–100 of 1297.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Boston Electric and Telephone id30626 View details | United States | Finance / Legal / Insurance | ||
|
Betcorp is a US-based company operating in the finance, legal, and insurance sector, providing various financial services. The company is located in the United States and offers a range of financial products. Betcorp was listed as a ransomware victim associated with play |
|||||
| Ransomware | Boston Electric and Telephone id30626 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Wring Group id30627 View details | United Kingdom | Construction / Real Estate | ||
|
Wring Group is a UK-based company operating in the construction and real estate sector, providing various services to clients in Great Britain. The company's offerings cater to the needs of the construction and real estate industries. Wring Group was listed as a ransomware victim associated with play |
|||||
| Ransomware | Wring Group id30627 View details | United Kingdom | Construction / Real Estate | ||
|
United Kingdom |
|||||
| Ransomware | AG Scholtes id30621 View details | Netherlands | Manufacturing / Engineering | ||
|
Agscholtes NL is a company based in the Netherlands, operating in the manufacturing and engineering sector. The company likely provides various services and products related to its sector, although specific details are not readily available. Agscholtes NL was listed as a ransomware victim associated with play |
|||||
| Ransomware | AG Scholtes id30621 View details | Netherlands | Manufacturing / Engineering | ||
|
Netherlands |
|||||
| Ransomware | Andorra Life id30622 View details | Andorra | Retail / E-commerce | ||
|
Andorralife is an e-commerce company based in Andorra, operating in the retail sector. The company likely offers various products and services to customers in Andorra and possibly beyond. Andorralife is listed as a ransomware victim associated with play |
|||||
| Ransomware | Andorra Life id30622 View details | Andorra | Retail / E-commerce | ||
|
United States |
|||||
| Ransomware | Svensk Direktreklam id30623 View details | Sweden | NGOs / Associations | ||
|
Sveriges Dövas Riksförbund, or www.sdr.se, is a Swedish organization that advocates for the rights and interests of deaf and hard of hearing individuals in Sweden. The organization operates in the NGOs and associations sector, providing various services and support to its members. Sveriges Dövas Riksförbund is headquartered in Sweden and focuses on promoting equality and accessibility for deaf and hard of hearing people. It was listed as a ransomware victim associated with play |
|||||
| Ransomware | Svensk Direktreklam id30623 View details | Sweden | NGOs / Associations | ||
|
Sweden |
|||||
| Ransomware | Preneed Funeral Programs id30323 View details | United States | Finance / Legal / Insurance | ||
|
Preneed.net operates in the finance and insurance sector in the United States, providing services related to pre-need insurance and financial planning. The company's services cater to individuals and families seeking to plan for future financial needs. Preneed.net was listed as a ransomware victim associated with play |
|||||
| Ransomware | Preneed Funeral Programs id30323 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Kevin Bao Lenguyen id30325 View details | Other | |||
|
Kblaa.com is an entity operating in the other sector. The specifics of its offerings and location are not well-documented. Kblaa.com was listed as a ransomware victim associated with play. |
|||||
| Ransomware | Kevin Bao Lenguyen id30325 View details | Other | |||
|
United States |
|||||
| Ransomware | United Infrastructure id30326 View details | United States | Construction / Real Estate | ||
|
United Infrastructure is a company operating in the construction and real estate sector in the US. The company is involved in various infrastructure projects. United Infrastructure was listed as a ransomware victim associated with play |
|||||
| Ransomware | United Infrastructure id30326 View details | United States | Construction / Real Estate | ||
|
United Kingdom |
|||||
| Ransomware | Locati Architects id30250 View details | Australia | Construction / Real Estate | ||
|
Locati Architects is a company based in Australia, operating in the construction and real estate sector, providing architectural services. The company is involved in various projects, contributing to the development of the Australian construction industry. Locati Architects was listed as a ransomware victim associated with play |
|||||
| Ransomware | Locati Architects id30250 View details | Australia | Construction / Real Estate | ||
|
United States |
|||||
| Ransomware | Silvestri & Associates Insurance id30251 View details | United States | Finance / Legal / Insurance | ||
|
Silvestri and Associates is a US-based company operating in the finance, legal, and insurance sector, providing various services to its clients. The company is located in the United States and offers a range of services tailored to the financial, legal, and insurance industries. Silvestri and Associates was listed as a ransomware victim associated with play |
|||||
| Ransomware | Silvestri & Associates Insurance id30251 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Western Construction id30137 View details | United States | Construction / Real Estate | ||
|
Wciboise is a company based in the US, operating in the construction and real estate sector. The company likely provides various services related to construction and real estate in its local area. Wciboise was listed as a ransomware victim associated with play |
|||||
| Ransomware | Western Construction id30137 View details | United States | Construction / Real Estate | ||
|
United States |
|||||
| Ransomware | J&J Gaming id30049 View details | United States | IT | ||
|
JJGaming is an IT company based in the US, providing gaming-related services. The company operates in the IT sector, offering various gaming solutions. JJGaming was listed as a ransomware victim associated with play |
|||||
| Ransomware | J&J Gaming id30049 View details | United States | IT | ||
|
United States |
|||||
| Ransomware | Kuhnline id30050 View details | Germany | Manufacturing / Engineering | ||
|
Kuhnline is a company based in Germany that operates in the manufacturing and engineering sector. The company likely provides various products and services related to these fields. Kuhnline was listed as a ransomware victim associated with play |
|||||
| Ransomware | Kuhnline id30050 View details | Germany | Manufacturing / Engineering | ||
|
United States |
|||||
| Ransomware | Benchmark Industrial Supply id30043 View details | United States | Manufacturing / Engineering | ||
|
Benchmark Inc is a US-based company operating in the manufacturing and engineering sector. The company provides various services and products to its clients. Benchmark Inc was listed as a ransomware victim associated with play |
|||||
| Ransomware | Benchmark Industrial Supply id30043 View details | United States | Manufacturing / Engineering | ||
|
United States |
|||||
| Ransomware | Greg Crosslin id29956 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Integrated Technologies id29958 View details | IT | |||
|
United States |
|||||
| Ransomware | eurOptimum id29959 View details | Germany | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Mundt and Associates id29734 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | Rainbow Distributors USA id29735 View details | United States | Retail / E-commerce | ||
|
United States |
|||||
| Ransomware | Pearson Ford id29661 View details | United Kingdom | Retail / E-commerce | ||
|
United States |
|||||
| Ransomware | Urschel Laboratories id29627 View details | United States | Manufacturing / Engineering | ||
|
United States |
|||||
| Ransomware | Dallis Law Firm id29628 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | The Chapel id29629 View details | United States | Hospitality / Food & Beverage / Tourism | ||
|
United States |
|||||
| Ransomware | Corley MFG id29630 View details | United States | Manufacturing / Engineering | ||
|
United States |
|||||
| Ransomware | Digitall Graphics id29538 View details | Canada | IT | ||
|
Canada |
|||||
| Ransomware | Hightower Communications id29539 View details | United States | Construction / Real Estate | ||
|
United States |
|||||
| Ransomware | GW Mechanical id29507 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | NL Fisher id29508 View details | Netherlands | Other | ||
|
Canada |
|||||
| Ransomware | Round Hill Country Club id29509 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | Legend Networking & Telecom id29510 View details | United States | Telecommunications | ||
|
United States |
|||||
| Ransomware | MyPillow id29511 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | De Waard Transport id29513 View details | Netherlands | Other | ||
|
Netherlands |
|||||
| Ransomware | Zuther Hautmann id29270 View details | Germany | Other | ||
|
United States |
|||||
| Ransomware | Infoworld Membership Systems id29097 View details | Other | |||
|
United States |
|||||
| Ransomware | Town Car International id29098 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | Northern Mechanical Contractors id29099 View details | Canada | Other | ||
|
United States |
|||||
| Ransomware | ACC Construction id29100 View details | United States | Construction / Real Estate | ||
|
United States |
|||||
| Ransomware | IWC Food Service id29101 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | Ashcroft Homes id29102 View details | Canada | Other | ||
|
Canada |
|||||
| Ransomware | DURAND-WAYLAND id29103 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | K & E Distributing id28957 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | Accessoires Outillage Ltee id28958 View details | Canada | Other | ||
|
Canada |
|||||
| Ransomware | EMA Engineering & Consulting id28959 View details | United States | Services | ||
|
United States |
|||||
| Ransomware | Crystal Point id27936 View details | United States | IT | ||
|
United States |
|||||
| Ransomware | Morphosis id27935 View details | United States | Construction / Real Estate | ||
|
United States |
|||||
| Ransomware | Barnes Solicitors LLP id27893 View details | United Kingdom | Finance / Legal / Insurance | ||
|
United Kingdom |
|||||
| Ransomware | Sokolin id27892 View details | United States | Retail / E-commerce | ||
|
United States |
|||||
| Ransomware | Brokk id27739 View details | Sweden | Manufacturing / Engineering | ||
|
Sweden |
|||||
| Ransomware | Colorado Construction id27738 View details | United States | Construction / Real Estate | ||
|
United Kingdom |
|||||
| Ransomware | Lucky Look id27737 View details | Germany | Communication / Marketing | ||
|
Germany |
|||||
| Ransomware | Weber Kracht & Chellew id27736 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Specflue id27735 View details | United Kingdom | Manufacturing / Engineering | ||
|
United Kingdom |
|||||
| Ransomware | Kivells id27734 View details | United Kingdom | Construction / Real Estate | ||
|
United Kingdom |
|||||
| Ransomware | Dock Pros id27733 View details | United States | Construction / Real Estate | ||
|
United States |
|||||
| Ransomware | Ampex Data Systems id27732 View details | United States | Manufacturing / Engineering | ||
|
United States |
|||||
| Ransomware | Valley Plating Inc id27731 View details | United States | Manufacturing / Engineering | ||
|
United States |
|||||
| Ransomware | Witt UK Group id27730 View details | United Kingdom | Manufacturing / Engineering | ||
|
United Kingdom |
|||||
| Ransomware | TPIS Industrial Services id27601 View details | United States | Services | ||
|
United States |
|||||
| Ransomware | All Real Estate Title Solutions id27553 View details | United States | Services | ||
|
United States |
|||||
| Ransomware | Roxiticus Golf Club id27552 View details | United States | Hospitality / Food & Beverage / Tourism | ||
|
United States |
|||||
| Ransomware | Pinnacle id27551 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Ascent Asset Group id27550 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Capital Wholesale Drug id27549 View details | United States | Healthcare / Pharma | ||
|
United States |
|||||
| Ransomware | Block Engineering id27548 View details | United States | Manufacturing / Engineering | ||
|
United States |
|||||
| Ransomware | Window & Door Design Center of Florida id27547 View details | United States | Finance / Legal / Insurance | ||
|
United States |
|||||
| Ransomware | Knight's Site Services id27387 View details | United States | Services | ||
|
United States |
|||||
| Ransomware | Gsolutionz id27386 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | Executive Aviation id27349 View details | United States | Other | ||
|
United States |
|||||
| Ransomware | Circle Floors id27292 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Eagle Industrial Equipment id27291 View details | United States | Manufacturing / Engineering | ||
|
United States |
|||||
| Ransomware | Infinity Systems id27200 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Serrano Industries id27199 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Helen Kaminski id27198 View details | Australia | Public Sector | ||
|
United States |
|||||
| Ransomware | Byard F Brogan id27197 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Facilities USA id27196 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Southern Concrete Construction id27195 View details | United States | Construction / Real Estate | ||
|
United States |
|||||
| Ransomware | T a Solberg id27152 View details | Norway | Public Sector | ||
|
United States |
|||||
| Ransomware | Don E Bower id27151 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Design To Print id27150 View details | United States | Communication / Marketing | ||
|
United States |
|||||
| Ransomware | Select Tool id27149 View details | Canada | Other | ||
|
Canada |
|||||
| Ransomware | DFW Aero Mechanix id27148 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Garland Williams & Associates id27147 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Equine Canada id27029 View details | Canada | Other | ||
|
Canada |
|||||
| Ransomware | GapVax id27028 View details | United States | Public Sector | ||
|
United States |
|||||
| Ransomware | Gordon/Clifford Realty id26988 View details | United States | Services | ||
|
United States |
|||||
| Ransomware | Cabka id26987 View details | Germany | Other | ||
|
Germany |
|||||