Ransomware Group intelligence

Play

Active

Track Play with 1297 published victims and 4 known leak locations in a single intelligence view.

Victims 1297 Known published victims in this dataset
First discovered 2022-11-26 Earliest victim discovery date
Last discovered 2026-07-16 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 929 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Play is tracked by Breach House as a ransomware group with 1297 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 2 Onion service Unknown k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion
    Leak location 3 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 4 Onion service Unknown j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (1297)

    Search, filter and paginate the victim timeline for Play. Showing 901–1000 of 1297.

    Type Target Discovered Country Business Category Intel Link
    Ransomware A&A Wireless id11064 View details United States Telecommunications
    Ransomware Powill Manufacturing & Engineering id11063 View details United States Manufacturing / Engineering
    Ransomware Trans+Plus Systems id11062 View details Canada Services
    Ransomware Hedlunds id11061 View details Sweden Other
    Ransomware Red River Title id11060 View details United States Public Sector
    Ransomware Compact Mould id11059 View details Canada Other
    Ransomware Winona Pattern & Mold id11058 View details United States Public Sector
    Ransomware Marketon id11057 View details United States Public Sector
    Ransomware Stack Infrastructure id11056 View details United States Construction / Real Estate
    Ransomware Coastal Car id11055 View details United States Public Sector
    Ransomware New Bedford Welding Supply id11054 View details United States Public Sector
    Ransomware Influence Communication id11053 View details Canada Communication / Marketing
    Ransomware Kool-air id11052 View details Canada Other
    Ransomware FBi Construction id11051 View details United States Construction / Real Estate
    Ransomware Gilmore & Associates id11039 View details United States Public Sector
    Ransomware Welch's id10953 View details United States Public Sector
    Ransomware W???h? id10941 View details United States Public Sector
    Ransomware LD Davis id10869 View details United States Public Sector
    Ransomware von Hagen id10868 View details Germany Other
    Ransomware Norman, Fox id10867 View details United States Public Sector
    Ransomware HR Ewell & Hy-tec id10866 View details United States Public Sector
    Ransomware Mechanical Reps id10865 View details United States Public Sector
    Ransomware Onclusive id10864 View details United States Public Sector
    Ransomware MeerServices id10863 View details Netherlands Services
    Ransomware DuBose Strapping id10862 View details United States Public Sector
    Ransomware SilverLining id10861 View details United States Public Sector
    Ransomware Modern Kitchens id10693 View details United States Public Sector
    Ransomware Greenwich Leisure id10692 View details United Kingdom Other
    Ransomware Ready Mixed Concrete id10691 View details United States Public Sector
    Ransomware Northeastern Sheet Metal id10690 View details United States Manufacturing / Engineering
    Ransomware Hannon Transport id10689 View details United States Transportation / Travel / Logistics
    Ransomware McMillan Pazdan Smith id10688 View details United States Public Sector
    Ransomware Mason Construction id10687 View details United States Construction / Real Estate
    Ransomware Albert Bartlett id10686 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Perry-McCall Construction id10685 View details United States Construction / Real Estate
    Ransomware Virgin Islands Lottery id10684 View details United States Public Sector
    Ransomware Premier Facility Management id10683 View details United States Communication / Marketing
    Ransomware Douglas County Libraries id10682 View details United States Public Sector
    Ransomware Leaders Staffing id10681 View details United States Public Sector
    Ransomware Innovex Downhole Solutions id10648 View details United States Services
    Ransomware TPG Architecture id10472 View details United States Construction / Real Estate
    Ransomware Televerde id10362 View details United States Public Sector
    Ransomware Madison Capital & WPM & The Time Group id10350 View details United States Public Sector
    Ransomware Morgan, Chambers & Wright & The Green Group id10340 View details United States Public Sector
    Ransomware Keyser Mason Ball id10339 View details Canada Finance / Legal / Insurance
    Ransomware CVR Associates id10319 View details United States Public Sector
    Ransomware Jon Richard id10240 View details United Kingdom Other
    Ransomware Concept Data id10239 View details Denmark Other
    Ransomware Packaging Solutions id10238 View details United States Services
    Ransomware Owen Quilty Professional id10237 View details Canada Communication / Marketing
    Ransomware Richard Harris Personal Injury Law Firm id10081 View details United States Finance / Legal / Insurance
    Ransomware Schoepe Display id10080 View details Germany Telecommunications
    Ransomware Waldner's id10079 View details United States Public Sector
    Ransomware Succes Schoonmaak id10078 View details Netherlands Other
    Ransomware DYWIDAG-Systems & American Transportation id10077 View details United States Transportation / Travel / Logistics
    Ransomware C?????z???? id10076 View details United States Public Sector
    Ransomware The CM Paula id10075 View details United States Public Sector
    Ransomware GlobalSpec id9982 View details United States Public Sector
    Ransomware California Innovations id9919 View details Canada Other
    Ransomware SMRT id9918 View details United States Public Sector
    Ransomware Intrepid Sea, Air & Space Museum id9917 View details United States Public Sector
    Ransomware Postworks id9916 View details United States Public Sector
    Ransomware PLS Logistics id9915 View details United States Transportation / Travel / Logistics
    Ransomware Ridge Vineyards id9914 View details United States Public Sector
    Ransomware AJO id9913 View details United States Public Sector
    Ransomware PHIBRO GMBH id9912 View details United States Public Sector
    Ransomware Silvent North America id9909 View details Sweden Other
    Ransomware GreenWaste Recovery id9908 View details United States Public Sector
    Ransomware Burton Wire & Cable id9907 View details United States Public Sector
    Ransomware Capespan id9906 View details South Africa Other
    Ransomware Becker Furniture World id9905 View details United States Public Sector
    Ransomware Payne Hicks Beach id9904 View details United Kingdom Other
    Ransomware Vitro Plus id9903 View details Netherlands Other
    Ransomware GVM id9902 View details United States Public Sector
    Ransomware Planbox id9901 View details Canada Other
    Ransomware AG Consulting Engineering id9900 View details United States Manufacturing / Engineering
    Ransomware Greater Richmond Transit id9899 View details United States Public Sector
    Ransomware Kuriyama of America id9898 View details United States Public Sector
    Ransomware Canderel Management id9767 View details Canada Services
    Ransomware OLA Consulting Engineers id9766 View details United States Services
    Ransomware Labtopia id9765 View details United States Public Sector
    Ransomware SC Hydraulic Engineering id9764 View details United States Manufacturing / Engineering
    Ransomware Unitransfer id9763 View details United States Public Sector
    Ransomware Noble Mountain Tree Farm id9754 View details United States Agriculture / Food
    Ransomware EDGE Realty Partners id9750 View details United States Public Sector
    Ransomware SurvTech Solutions id9749 View details United States IT
    Ransomware Byfod id9748 View details Netherlands Other
    Ransomware Retailer Web Services id9747 View details United States Retail / E-commerce
    Ransomware Sparex id9746 View details United Kingdom Other
    Ransomware Continental Shipping Line id9745 View details United States Transportation / Travel / Logistics
    Ransomware MooreCo id9744 View details United States Public Sector
    Ransomware AMERICAN INSULATED GLASS id9743 View details United States Public Sector
    Ransomware Elston-nationwide id9742 View details United States Public Sector
    Ransomware Thillens id9741 View details United States Public Sector
    Ransomware SinglePoint Outsourcing id9740 View details United States Services
    Ransomware McHale Landscape Design id9675 View details United States Public Sector
    Ransomware The DMC id9616 View details United States Public Sector
    Ransomware PIKE Technologies id9561 View details United States IT
    Ransomware Proforma Albrecht id9560 View details United States Communication / Marketing
    Ransomware Fgs id9559 View details Australia Other