Ransomware Group intelligence

Play

Active

Track Play with 1297 published victims and 4 known leak locations in a single intelligence view.

Victims 1297 Known published victims in this dataset
First discovered 2022-11-26 Earliest victim discovery date
Last discovered 2026-07-16 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 929 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Play is tracked by Breach House as a ransomware group with 1297 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 2 Onion service Unknown k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion
    Leak location 3 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 4 Onion service Unknown j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (1297)

    Search, filter and paginate the victim timeline for Play. Showing 501–600 of 1297.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Compound Solutions id18274 View details United States Services
    Ransomware T J Machine & Tool id18273 View details United States Public Sector
    Ransomware Gevril id18272 View details United States Public Sector
    Ransomware Peak Season id18271 View details United States Public Sector
    Ransomware Yorke & Curtis id18270 View details United States Public Sector
    Ransomware Buckley BalaWilson Mew id18269 View details United States Finance / Legal / Insurance
    Ransomware Holiday Comfort id18268 View details United States Public Sector
    Ransomware Clawson Honda id18267 View details United States Finance / Legal / Insurance
    Ransomware Dectron id18266 View details Canada Other
    Ransomware Nor Arc id18265 View details Canada Other
    Ransomware Pre Con Industries id18127 View details United States Communication / Marketing
    Ransomware IT-IQ Botswana id18126 View details Botswana Other
    Ransomware North American Fire Hose id18125 View details United States Public Sector
    Ransomware Couri Insurance Agency id18124 View details United States Finance / Legal / Insurance
    Ransomware M&n Management id18123 View details United States Services
    Ransomware Optometrics id18122 View details United States Public Sector
    Ransomware International Process Plants id18121 View details United States Communication / Marketing
    Ransomware Ganong Bros id18120 View details Canada Other
    Ransomware 3cBSI id17836 View details United States Public Sector
    Ransomware Finck Cigar id17835 View details United States Public Sector
    Ransomware Story Environmental id17830 View details Canada Other
    Ransomware Muller Insurance id17829 View details United States Finance / Legal / Insurance
    Ransomware Convert Solar id17806 View details United States Energy
    Ransomware Radco Industries id17805 View details United States Public Sector
    Ransomware Fairhaven Shipyard Companies id17804 View details United States Public Sector
    Ransomware Island Realty id17803 View details United States Public Sector
    Ransomware First Federal Savings & Loan id17802 View details United States Public Sector
    Ransomware ALCOTT HR GROUP id17801 View details United States Public Sector
    Ransomware Cuna Supply id17601 View details United States Public Sector
    Ransomware The Townsley Law Firm Information id17600 View details United States Finance / Legal / Insurance
    Ransomware Bushmans id17599 View details United States Public Sector
    Ransomware Inland Empire Distribution Systems, Inc. id17598 View details United States Public Sector
    Ransomware Wylie Steel Fabricators id17597 View details United States Manufacturing / Engineering
    Ransomware Oxford Companies id17596 View details United States Public Sector
    Ransomware Stage 3 Separation id17595 View details United States Public Sector
    Ransomware Transkid id17594 View details Canada Other
    Ransomware Rheinischer Sch id17593 View details Germany Other
    Ransomware Startek Peglar & Calcagni id17592 View details Canada Finance / Legal / Insurance
    Ransomware Weed Man Canada id17591 View details Canada Other
    Ransomware Bulldog Oilfield Services id17590 View details United States Energy
    Ransomware Hydronic & Steam Equipment id17537 View details United States Public Sector
    Ransomware Ratioparts id17536 View details Germany Manufacturing / Engineering
    Ransomware CST Corp id17535 View details United States Public Sector
    Ransomware Shields Facilities Maintenance id17520 View details United States Public Sector
    Ransomware Tie Down Engineering id17451 View details United States Manufacturing / Engineering
    Ransomware Monroe Transportation Services Inc id17450 View details United States Transportation / Travel / Logistics
    Ransomware Kensington Glass Arts id17449 View details United States Public Sector
    Ransomware EAC Consulting id17448 View details United States Services
    Ransomware Baltimore Country Club id17447 View details United States Public Sector
    Ransomware Jildor Shoes id17446 View details United States Public Sector
    Ransomware Mainline Information Systems id17445 View details United States Public Sector
    Ransomware Fastighetsservice AB id17444 View details Sweden Other
    Ransomware Shinn Fu Company of America id17442 View details United States Public Sector
    Ransomware ROCK SOLID Stabilization & Reclamation id17441 View details United States Public Sector
    Ransomware Cold Storage Manufacturing id17440 View details United States Manufacturing / Engineering
    Ransomware Neaton Auto Products Manufacturing id17439 View details United States Manufacturing / Engineering
    Ransomware Mid-State Machine & Fabricating Corp id17228 View details United States Public Sector
    Ransomware Dickerson & Nieman Realtors id17150 View details United States Public Sector
    Ransomware Sheridan Nurseries id17149 View details Canada Other
    Ransomware The Hill Brush id17148 View details United States Public Sector
    Ransomware DPC Development id17147 View details United States IT
    Ransomware Woodway USA id17146 View details United States Public Sector
    Ransomware Daniel Island Club id17145 View details United States Public Sector
    Ransomware KWS id17144 View details United States Public Sector
    Ransomware QGS Development id17143 View details United States IT
    Ransomware Night Hawk id17022 View details United States Agriculture / Food
    Ransomware By design id17000 View details United States Public Sector
    Ransomware Cahoon Farms id16999 View details United States Agriculture / Food
    Ransomware Marshall & Bruce Printing id16998 View details United States Communication / Marketing
    Ransomware Johnston id16997 View details United States Public Sector
    Ransomware Plymouth Foam id16996 View details United States Public Sector
    Ransomware Commercial & Residential Management Group id16992 View details United States Services
    Ransomware daVinci id16991 View details United States Retail / E-commerce
    Ransomware TRIVAD id16990 View details United States Public Sector
    Ransomware Wallin & Klarich id16989 View details United States Finance / Legal / Insurance
    Ransomware Cimarron Telephone Company id16988 View details United States Public Sector
    Ransomware McCray Lumber id16458 View details United States Public Sector
    Ransomware Zeifmans id16457 View details Canada Other
    Ransomware Luxury Yacht Group id16456 View details United States Public Sector
    Ransomware Bettisworth North id16455 View details United States Public Sector
    Ransomware Krispy Kreme id16213 View details United States Telecommunications
    Ransomware Joshua Grading & Excavating id16124 View details United States Public Sector
    Ransomware South Plains Implement id16123 View details United States Public Sector
    Ransomware Chemitex SA Information id16122 View details Belgium Other
    Ransomware Hatfield Consultants id16118 View details Canada Other
    Ransomware Lanigan Ryan id16117 View details United States Public Sector
    Ransomware Welker id16116 View details United States Communication / Marketing
    Ransomware Sigarth id16018 View details Sweden Other
    Ransomware Long Beach Convention Center id16017 View details United States Public Sector
    Ransomware Maxus Group id16016 View details United States Public Sector
    Ransomware SBW id16015 View details Canada Other
    Ransomware Sunline id16014 View details United States Public Sector
    Ransomware Artemis Holding id16012 View details Switzerland Other
    Ransomware Arnott id16011 View details United States Public Sector
    Ransomware Standard Calibrations id15882 View details United States Public Sector
    Ransomware NatAlliance Securities id15881 View details United States Public Sector
    Ransomware ITO EN id15880 View details Japan Other
    Ransomware Max Trans id15879 View details United States Public Sector
    Ransomware Trace3 id15767 View details United States Public Sector
    Ransomware Bendheim id15766 View details United States Public Sector