Ransomware Group intelligence

Play

Active

Track Play with 1297 published victims and 4 known leak locations in a single intelligence view.

Victims 1297 Known published victims in this dataset
First discovered 2022-11-26 Earliest victim discovery date
Last discovered 2026-07-16 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 929 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Play is tracked by Breach House as a ransomware group with 1297 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 2 Onion service Unknown k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion
    Leak location 3 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 4 Onion service Unknown j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (1297)

    Search, filter and paginate the victim timeline for Play. Showing 301–400 of 1297.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Celtic Engineering id22238 View details United States Manufacturing / Engineering
    Ransomware GDZ Computer Services id22237 View details United States IT
    Ransomware Cool Wind Ventilation id22236 View details United States Energy
    Ransomware Rising Star Hydraulics id22235 View details United States Public Sector
    Ransomware Edwards Interiors id22234 View details United States Public Sector
    Ransomware GL Veneer id22233 View details United States Public Sector
    Ransomware Energy Fishing id22189 View details United States Energy
    Ransomware BDE Computer Services id22188 View details Bangladesh IT
    Ransomware Promark Partners id22187 View details United States Communication / Marketing
    Ransomware Arboris id22062 View details United States Public Sector
    Ransomware Juggernaut id22061 View details United States Public Sector
    Ransomware Vanderpool Construction id22060 View details United States Construction / Real Estate
    Ransomware All States Materials Group id22059 View details United States Public Sector
    Ransomware Logan & Mencuccini id21972 View details United States Finance / Legal / Insurance
    Ransomware Edward J McKarski id21971 View details United States Finance / Legal / Insurance
    Ransomware Banville Wine Merchants id21970 View details United States Public Sector
    Ransomware Galaxy Freightline id21969 View details United States Transportation / Travel / Logistics
    Ransomware Premier Realty Group id21968 View details United States Communication / Marketing
    Ransomware CBG Surveying Texas id21874 View details United States Public Sector
    Ransomware Omega Global Technologies id21873 View details IT
    Ransomware ABcom id21741 View details United States Public Sector
    Ransomware Greenscape Pump Services id21740 View details United States Services
    Ransomware eShipGlobal id21739 View details United States Public Sector
    Ransomware NextLabs id21738 View details United States Public Sector
    Ransomware The Scharine Group id21694 View details United States Public Sector
    Ransomware Bluewater Yacht Sales id21693 View details United States Retail / E-commerce
    Ransomware Travancore Analytics id21692 View details India Public Sector
    Ransomware Rite Track id21691 View details United States Public Sector
    Ransomware NEAS id21639 View details Denmark Other
    Ransomware RHI Supply id21638 View details United States Public Sector
    Ransomware CFI Tire Service id21637 View details United States Public Sector
    Ransomware Jamco Aerospace id21594 View details Japan Public Sector
    Ransomware Emprise id21587 View details United Kingdom Communication / Marketing
    Ransomware Brad's Bedding Plants id21586 View details United States Public Sector
    Ransomware The Magni Group id21585 View details United States Public Sector
    Ransomware Phoenix Lighting id21524 View details United States Public Sector
    Ransomware Backstage Library Works id21523 View details United States Public Sector
    Ransomware White Horse Packaging id21522 View details United States Public Sector
    Ransomware Terillium id21521 View details United States Public Sector
    Ransomware Thern id21471 View details United States Public Sector
    Ransomware Quartus Engineering id21470 View details United States Manufacturing / Engineering
    Ransomware Ka Logistics id21330 View details United States Transportation / Travel / Logistics
    Ransomware DA Whitacre Construction id21329 View details United States Construction / Real Estate
    Ransomware Morrison Companies id21186 View details United States Public Sector
    Ransomware IMSSA Manufacturing id21185 View details United States Manufacturing / Engineering
    Ransomware Hulberg & Associates id21140 View details United States Public Sector
    Ransomware Rockrose Development id21139 View details United States IT
    Ransomware Tulsat id21113 View details United States Public Sector
    Ransomware INS Quebec id21112 View details Canada Other
    Ransomware EIA Global id21111 View details United States Public Sector
    Ransomware CyberlinkASP id21110 View details United States IT
    Ransomware FormWood Industries id21109 View details United States Public Sector
    Ransomware Wfmt id21059 View details United States Public Sector
    Ransomware Wood, Patel & Associates id21058 View details United States Public Sector
    Ransomware Tyree Oil id21057 View details United States Energy
    Ransomware Lee Publications id21017 View details United States Public Sector
    Ransomware Allied Steel Buildings id21016 View details United States Construction / Real Estate
    Ransomware Advance Ready Mix id21015 View details United States Public Sector
    Ransomware Whim Hospitality id21001 View details United States Healthcare / Pharma
    Ransomware JFC Electric id21000 View details United States Public Sector
    Ransomware Metric id20999 View details Canada Other
    Ransomware All Choice Rentals id20998 View details Canada Other
    Ransomware Biofloral id20997 View details Canada Other
    Ransomware Lydig Construction id20996 View details United States Construction / Real Estate
    Ransomware Budget Electric id20894 View details United States Public Sector
    Ransomware Carter Manufacturing id20871 View details United States Manufacturing / Engineering
    Ransomware Emtech Inc id20870 View details United States IT
    Ransomware View Zuellig Industrial id20869 View details Thailand Manufacturing / Engineering
    Ransomware Islington Golf Club id20868 View details Canada NGOs / Associations
    Ransomware Sunrise Springs Spa Resort id20867 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware CGP&H id20866 View details United States Public Sector
    Ransomware Cartel Communication Systems id20865 View details Canada Communication / Marketing
    Ransomware Associated Packaging id20864 View details United States Public Sector
    Ransomware Dickow Cyzak Tile id20860 View details United States Public Sector
    Ransomware Merlin Industries id20851 View details United States Public Sector
    Ransomware Fisher59 id20772 View details United States Public Sector
    Ransomware Ovalstrapping id20771 View details Canada Public Sector
    Ransomware Dairy Farmers of America id20770 View details United States Agriculture / Food
    Ransomware Vacation Myrtle Beach id20746 View details United States Public Sector
    Ransomware Place Homes id20745 View details Public Sector
    Ransomware Jasper Products id20686 View details United States Communication / Marketing
    Ransomware NF Stroth & Associates id20685 View details United States Public Sector
    Ransomware Project Partners id20669 View details United States Communication / Marketing
    Ransomware S&H Express id20668 View details United States Communication / Marketing
    Ransomware Rollex id20667 View details United States Public Sector
    Ransomware NPD Products id20666 View details United States Communication / Marketing
    Ransomware Homestead Gardens id20541 View details United States Public Sector
    Ransomware Community Choice Credit Union id20540 View details United States Finance / Legal / Insurance
    Ransomware Ebac id20468 View details United Kingdom Other
    Ransomware Triumph Construction id20467 View details United States Construction / Real Estate
    Ransomware Rochon id20416 View details United States Public Sector
    Ransomware Sorter Construction id20415 View details United States Construction / Real Estate
    Ransomware Capital Trade id20399 View details United States Public Sector
    Ransomware FLOE Internationa id20398 View details United States Public Sector
    Ransomware Tri-Point Solutions id20349 View details United States Services
    Ransomware W.E. Bowers id20348 View details United States Public Sector
    Ransomware Anchor Industries id20347 View details United States Public Sector
    Ransomware Eliel Cycling id20300 View details United States Public Sector
    Ransomware KDV Label id20299 View details United States Public Sector
    Ransomware Frederick's Machine & Tool Shop id20254 View details United States Retail / E-commerce