Ransomware Group intelligence

Play

Active

Track Play with 1297 published victims and 4 known leak locations in a single intelligence view.

Victims 1297 Known published victims in this dataset
First discovered 2022-11-26 Earliest victim discovery date
Last discovered 2026-07-16 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 929 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Play is tracked by Breach House as a ransomware group with 1297 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 2 Onion service Unknown k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion
    Leak location 3 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 4 Onion service Unknown j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (1297)

    Search, filter and paginate the victim timeline for Play. Showing 1101–1200 of 1297.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Miami Management id8197 View details United States Services
    Ransomware BTC Power id8196 View details United States Energy
    Ransomware Stanford Transportation Inc id8195 View details Transportation / Travel / Logistics
    Ransomware Bolton Group id8194 View details Italy Services
    Ransomware Legends Limousine id8193 View details United States Public Sector
    Ransomware Oneonline id8192 View details United States Public Sector
    Ransomware Top Light id8114 View details Germany Other
    Ransomware Algorry Zappia & Associates id8113 View details Australia Other
    Ransomware EAI id8112 View details Other
    Ransomware Garage Living id8011 View details Canada Other
    Ransomware The Dispenser USA id8012 View details Canada Telecommunications
    Ransomware Aapd id8010 View details Australia Other
    Ransomware Birch, Horton, Bittner & Cherot id8009 View details United States Public Sector
    Ransomware DAL-TECH Engineering id8008 View details United States IT
    Ransomware Coral Resort id8007 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Professionnel France id8006 View details France Communication / Marketing
    Ransomware ACTIVA Group id8005 View details Cameroon Services
    Ransomware Aquatlantis id8004 View details Portugal Other
    Ransomware John Mulder Heating & Air Conditioning id7435 View details Canada Other
    Ransomware Scharco Elektronik id7434 View details Germany Other
    Ransomware Primoteq id7433 View details Netherlands Communication / Marketing
    Ransomware Grupo MH id7432 View details Spain Hospitality / Food & Beverage / Tourism
    Ransomware FERRE BARNIEDO id7431 View details Mexico Hospitality / Food & Beverage / Tourism
    Ransomware Samson Electric id7410 View details Other
    Ransomware Kensington Publishing id7378 View details United States Public Sector
    Ransomware Fernmoor Homes id7377 View details United States Public Sector
    Ransomware ECS Technology Group id7376 View details United States IT
    Ransomware Woodbine Hospitality id7375 View details United States Healthcare / Pharma
    Ransomware Sea Force IX id7374 View details United States Public Sector
    Ransomware Centennial Management id7373 View details United States Services
    Ransomware Lane Valente Industries id7180 View details Canada Other
    Ransomware Lazer Tow id7163 View details United States Public Sector
    Ransomware Star Island Resort id7162 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Indiana Dimension id7161 View details United States Public Sector
    Ransomware Lawer SpA id7160 View details Italy Finance / Legal / Insurance
    Ransomware NST Attorneys at Law id7151 View details United States Finance / Legal / Insurance
    Ransomware Uniquify id7150 View details United States Public Sector
    Ransomware Geneva Software id7149 View details United States IT
    Ransomware MUJI Europe Holdings Limited id7148 View details Other
    Ransomware Betty Lou's id7147 View details United States Public Sector
    Ransomware Capacity LLC id7146 View details United States Public Sector
    Ransomware Safety Network id7145 View details United States Telecommunications
    Ransomware Texas Heat Treating id7039 View details United States Public Sector —
    Ransomware Intoximeters id7038 View details United States Public Sector —
    Ransomware Algotech id7037 View details Czechia IT —
    Ransomware Cambridge Group of Clubs id7036 View details Canada Services —
    Ransomware Hill International id6992 View details Services —
    Ransomware Peter Mark id6984 View details Ireland Other —
    Ransomware Dancie Perugini Ware Public Relations id6983 View details United States Communication / Marketing —
    Ransomware Summit Hut id6982 View details United States Public Sector —
    Ransomware OMNIPOL id6980 View details Czechia Public Sector —
    Ransomware Hi-tec, Batra Group id6979 View details United Kingdom Services —
    Ransomware Barentz North America id6978 View details United States Hospitality / Food & Beverage / Tourism —
    Ransomware PWI Engineering id6977 View details United States Manufacturing / Engineering —
    Ransomware Federation Francaise de Rugby id6976 View details France NGOs / Associations —
    Ransomware Luís Simoes id6975 View details Portugal Other —
    Ransomware Allpro Consulting Group id6974 View details United States Communication / Marketing —
    Ransomware Lorclon id6973 View details United Kingdom Other —
    Ransomware wolfs block management limited id6968 View details United Kingdom Services —
    Ransomware Globalcaja id6709 View details Spain Services
    Ransomware Fortress Paper id6708 View details Canada Other
    Ransomware Unico Data,INSYS Industriesysteme,PathA Suisse,PB Swiss Tools,Boess Gruppe id6707 View details Switzerland Other
    Ransomware Alberta Newsprint id6706 View details Canada Communication / Marketing
    Ransomware CS Cargo Group id6705 View details Czechia Transportation / Travel / Logistics
    Ransomware BMD Systemhaus id6703 View details Austria Other
    Ransomware Buffalo Niagara Association id6702 View details United States NGOs / Associations
    Ransomware Abeko id6701 View details Netherlands Other
    Ransomware NORANET - CZ id6700 View details Czechia Public Sector
    Ransomware Shows & Artists id6699 View details Germany Other
    Ransomware Soroc id6676 View details Canada Other
    Ransomware Black Cat Networks id6520 View details Germany Telecommunications
    Ransomware Paragon Software Lanka id6519 View details Sri Lanka IT
    Ransomware Royal Centre id6518 View details Canada Other
    Ransomware Poly id6517 View details United States Public Sector
    Ransomware Mayberry Investments id6516 View details Jamaica Finance / Legal / Insurance
    Ransomware Grupo Corporacion Control id6515 View details Mexico Services
    Ransomware Studioline Photography id6514 View details Germany Other
    Ransomware Optimus Steel id6513 View details United States Manufacturing / Engineering
    Ransomware Xplain id6512 View details Switzerland Other
    Ransomware Aria Online id6511 View details United States Public Sector
    Ransomware SOWITEC id6450 View details Germany Other
    Ransomware Sauerbruch Hutton id6403 View details Germany Other
    Ransomware JP Maguire & Associates id6402 View details United States Public Sector
    Ransomware Germany id6401 View details Germany Other
    Ransomware KLC Network Services id6374 View details United States Telecommunications —
    Ransomware SIVSA id6327 View details Spain IT
    Ransomware Coremain id6328 View details Spain Finance / Legal / Insurance
    Ransomware Nova Group id6326 View details Australia Services
    Ransomware City of Lowell id6325 View details United States Public Sector
    Ransomware DGC id6324 View details Sweden Services
    Ransomware Libra Virtua id6323 View details Hungary Communication / Marketing
    Ransomware Commune de Saxon id6322 View details Switzerland Public Sector
    Ransomware Negma Business Solutions id6321 View details United States Services
    Ransomware Vocalcom id6320 View details France IT
    Ransomware Woonkracht10 id6319 View details Netherlands Retail / E-commerce
    Ransomware Groupe Gambetta id6201 View details France Services
    Ransomware UECC id6200 View details Norway Other
    Ransomware Bang IT Solutions id6166 View details Australia Services —
    Ransomware Huissiers id6165 View details France Other
    Ransomware Coldiretti id6164 View details Italy Other —