Ransomware Group intelligence

Play

Active

Track Play with 1297 published victims and 4 known leak locations in a single intelligence view.

Victims 1297 Known published victims in this dataset
First discovered 2022-11-26 Earliest victim discovery date
Last discovered 2026-07-16 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 929 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Play is tracked by Breach House as a ransomware group with 1297 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 2 Onion service Unknown k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion
    Leak location 3 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 4 Onion service Unknown j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (1297)

    Search, filter and paginate the victim timeline for Play. Showing 1001–1100 of 1297.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Trademark Property id9558 View details United States Construction / Real Estate
    Ransomware Nomot id9557 View details Netherlands Other
    Ransomware Global Technologies Racing Ltd id9556 View details United Kingdom IT
    Ransomware Thompson Candy id9555 View details United States Public Sector
    Ransomware Road Scholar Transport id9554 View details United States Transportation / Travel / Logistics
    Ransomware KaDeWe id9553 View details Germany Other
    Ransomware Wyatt Detention Center id9552 View details United States Public Sector
    Ransomware Guntert & Zimmerman id9551 View details United States Public Sector
    Ransomware ConSpare id9550 View details United Kingdom Other
    Ransomware JS Hovnanian & Sons id9459 View details United States Public Sector
    Ransomware Identification Products id9458 View details United States Communication / Marketing
    Ransomware M.R. Williams id9457 View details United States Public Sector
    Ransomware DESIGNA Verkehrsleittechnik id9456 View details United States IT
    Ransomware The Supply Room Companies & Citron WorkSpaces id9455 View details United States Public Sector
    Ransomware Ackerman-Estvold id9454 View details United States Public Sector
    Ransomware Meindl id9453 View details Germany Other
    Ransomware Conditioned Air id9452 View details United States Public Sector
    Ransomware Inclinator id9451 View details United States Public Sector
    Ransomware Crown Supply Co id9450 View details United States Public Sector
    Ransomware GeoPoint Surveying id9372 View details United States Public Sector
    Ransomware Bry-Air id9359 View details United States Public Sector
    Ransomware JDRM Engineering id9358 View details United States Manufacturing / Engineering
    Ransomware Craft-Maid id9357 View details United States Public Sector
    Ransomware Hilyard's id9356 View details United States Public Sector
    Ransomware North Dakota Grain Inspection Services id9355 View details United States Agriculture / Food
    Ransomware Gsp Components id9354 View details United States Manufacturing / Engineering
    Ransomware Ricardo id9353 View details United Kingdom Other
    Ransomware G??P???? S????y??? id9302 View details United States Public Sector
    Ransomware Brodart id9275 View details United States Public Sector
    Ransomware Dallas County id9261 View details United States Public Sector
    Ransomware Alpha Mortgage id9260 View details United States Public Sector
    Ransomware Encompass Elements id9259 View details United States Public Sector
    Ransomware CK Associates id9258 View details United States Public Sector
    Ransomware Yingling Aviation id9257 View details United States Transportation / Travel / Logistics
    Ransomware Sam Tell Companies id9256 View details United States Public Sector
    Ransomware Waterstone Faucets id9255 View details United States Public Sector
    Ransomware Bush Refrigeration id9254 View details United States Public Sector
    Ransomware Drug Emporium id9253 View details United States Public Sector
    Ransomware Online Development id9252 View details United States IT
    Ransomware KDI Office Technology id9251 View details United States IT
    Ransomware Het Veer id9250 View details Belgium Other
    Ransomware Laiho Group id9235 View details Finland Services
    Ransomware Williamson Foodservice id9166 View details United Kingdom Agriculture / Food
    Ransomware Epaccsys id9165 View details United Kingdom Other
    Ransomware Tru-val Electric id9164 View details United States Public Sector
    Ransomware Bridgeport Fittings id9163 View details United States Public Sector
    Ransomware Kobi Karp Architecture and Interior Design id9162 View details United States Construction / Real Estate
    Ransomware RADISE id9161 View details United States Public Sector
    Ransomware Polar Tech Industries id9160 View details United States IT
    Ransomware Ipswich Bay Glass id9159 View details United States Public Sector
    Ransomware Hygieneering id9158 View details United States Public Sector
    Ransomware The Fountain Group id9157 View details Public Sector
    Ransomware Venture Plastics id9156 View details United States Manufacturing / Engineering
    Ransomware Milk Source id9155 View details United States Public Sector
    Ransomware Associated Wholesale Grocers id9143 View details United States Public Sector
    Ransomware Metro Transit id9035 View details United States Public Sector
    Ransomware Saltire Energy id9024 View details Singapore Energy
    Ransomware Starr Finley id9023 View details United States Public Sector
    Ransomware WCM Europe id9022 View details United Kingdom Other
    Ransomware NachtExpress Austria GmbH id9021 View details Austria Communication / Marketing
    Ransomware Centek industries id9020 View details United States Public Sector
    Ransomware M??? T?????? id9019 View details United States Public Sector
    Ransomware Hughes Gill Cochrane Tinetti id9018 View details United States Public Sector
    Ransomware Roof Management id8962 View details United States Services
    Ransomware Security Instrument id8961 View details United States Finance / Legal / Insurance
    Ransomware Filtration Control id8960 View details United Kingdom Other
    Ransomware Cinepolis USA id8959 View details United States Public Sector
    Ransomware CHARMANT Group id8958 View details United States Public Sector
    Ransomware Stavanger Municipality id8957 View details Norway Public Sector
    Ransomware Jacobson id8894 View details United States Public Sector
    Ransomware Robuck Homes id8893 View details United States Public Sector
    Ransomware Webb Landscape id8892 View details United States Public Sector
    Ransomware Amanzi Marble & Granite id8891 View details United States Public Sector
    Ransomware BAMO id8890 View details United States Public Sector
    Ransomware Van Eck Transport id8889 View details Netherlands Transportation / Travel / Logistics
    Ransomware Terralogic id8888 View details United States Public Sector
    Ransomware Kessler Collins id8887 View details United States Public Sector
    Ransomware Plumbase id8886 View details United Kingdom Other
    Ransomware Wexas id8884 View details United Kingdom Other
    Ransomware First Line id8683 View details United Kingdom Other
    Ransomware Rea Magnet Wire id8682 View details United States Public Sector
    Ransomware RTA id8681 View details United States Public Sector
    Ransomware TSC id8680 View details United States Public Sector
    Ransomware PASCHAL - Werk G Maier id8679 View details Germany Other
    Ransomware Vucke id8678 View details Slovakia Other
    Ransomware Dpc & S id8604 View details United States Services
    Ransomware Carpet One id8603 View details Canada Other
    Ransomware Markentrainer Werbeagentur, Elwema Automotive id8602 View details Germany Manufacturing / Engineering
    Ransomware Precisely, Winshuttle id8509 View details United States Communication / Marketing
    Ransomware Kikkerland Design id8508 View details United States Public Sector
    Ransomware Markentrainer Werbeagentur id8507 View details Germany Other
    Ransomware Master Interiors id8506 View details United States Finance / Legal / Insurance
    Ransomware Bordelon Marine id8505 View details United States Public Sector
    Ransomware Majestic Spice id8504 View details United States Public Sector
    Ransomware Firmdale Hotels id8485 View details United Kingdom Hospitality / Food & Beverage / Tourism
    Ransomware F??????? ?????s id8419 View details United Kingdom Other
    Ransomware Alfagomma, Argus Fluidhandling Ltd id8301 View details United States Public Sector
    Ransomware A???? F??????????? Ltd id8231 View details United Kingdom Services
    Ransomware ABS Auto Auctions id8199 View details United States Public Sector
    Ransomware DSA Law Pty Ltd id8198 View details Australia Finance / Legal / Insurance