Ransomware Group intelligence

Play

Active

Track Play with 1297 published victims and 4 known leak locations in a single intelligence view.

Victims 1297 Known published victims in this dataset
First discovered 2022-11-26 Earliest victim discovery date
Last discovered 2026-07-16 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 929 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Play is tracked by Breach House as a ransomware group with 1297 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 2 Onion service Unknown k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion
    Leak location 3 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 4 Onion service Unknown j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (1297)

    Search, filter and paginate the victim timeline for Play. Showing 601–700 of 1297.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Specialty Bolt And Screw id15765 View details United States Public Sector
    Ransomware LenelS2 id15570 View details United States Public Sector
    Ransomware Henderson Stamping & Production id15496 View details United States Manufacturing / Engineering
    Ransomware Diamond Brand Gear id15495 View details United States Public Sector
    Ransomware Dairy Farmers of Canada id15494 View details Canada Agriculture / Food
    Ransomware Miller & Smith id15493 View details United States Public Sector
    Ransomware Hive Power Engineering id15492 View details United States Manufacturing / Engineering
    Ransomware CMD id15491 View details United States Public Sector
    Ransomware IVC Technologies id15490 View details United States IT
    Ransomware Birdair id15489 View details United States Public Sector
    Ransomware Vox Printing id15488 View details United States Communication / Marketing
    Ransomware Postcard Mania id15201 View details United States Public Sector
    Ransomware Paragon Plastics id15177 View details United States Manufacturing / Engineering
    Ransomware Delfin Design & Manufacturing id15176 View details United States Manufacturing / Engineering
    Ransomware Smitty's Supply id15175 View details United States Public Sector
    Ransomware S & W Kitchens id15174 View details United States Public Sector
    Ransomware Dome Construction id15173 View details United States Construction / Real Estate
    Ransomware JS McCarthy Printers id15112 View details United States Communication / Marketing
    Ransomware CGR Technologies id15111 View details United States IT
    Ransomware Maval Industries id15069 View details United States Public Sector
    Ransomware Unlimited Lawn Care id15068 View details United States Finance / Legal / Insurance
    Ransomware Pureflow Airdog id15067 View details United States Public Sector
    Ransomware iFocus Consulting id15066 View details United States Services
    Ransomware Pelsue id15065 View details United States Public Sector
    Ransomware Paul White Company id15064 View details United States Public Sector
    Ransomware Sunrise Express id15063 View details United States Communication / Marketing
    Ransomware Astac id15054 View details United States Public Sector
    Ransomware Dana Safety Supply id15053 View details United States Public Sector
    Ransomware Dirksen Screw Products id15052 View details United States Communication / Marketing
    Ransomware TV Guide Magazine id15003 View details United States Public Sector
    Ransomware Positive Business Solutions id15002 View details United States Services
    Ransomware C & C Industries id15001 View details United States Public Sector
    Ransomware Iron World Manufacturing id14922 View details United States Manufacturing / Engineering
    Ransomware Eagle Industries id14921 View details United States Public Sector
    Ransomware Action Heating & Cooling id14920 View details United States Public Sector
    Ransomware Mainelli Mechanical Contractors id14919 View details United States Construction / Real Estate
    Ransomware TU Parks id14918 View details United States Public Sector
    Ransomware Ivanhoe Club id14917 View details United States Public Sector
    Ransomware Wilkinson id14829 View details Canada Other
    Ransomware Mid State Electric id14828 View details United States Public Sector
    Ransomware Absolute Machine Tools id14827 View details United States Public Sector
    Ransomware McCody id14826 View details United States Public Sector
    Ransomware The Strainrite Companies id14825 View details United States Public Sector
    Ransomware W?l?????n id14800 View details Canada Other
    Ransomware CETRULO id14785 View details United States Public Sector
    Ransomware Nor-Well id14784 View details United States Public Sector
    Ransomware Kuhn and Associates id14783 View details United States Public Sector
    Ransomware Nora Biscuits id14765 View details Netherlands Other
    Ransomware Rescar Companies id14764 View details United States Public Sector
    Ransomware Concord id14763 View details United States Public Sector
    Ransomware OzarksGo id14762 View details United States Public Sector
    Ransomware Byerly Aviation id14761 View details United States Transportation / Travel / Logistics
    Ransomware Courtney Construction id14760 View details United States Construction / Real Estate
    Ransomware Henneman Engineering id14757 View details United States Manufacturing / Engineering
    Ransomware Misionero Vegetables id14756 View details United States Public Sector
    Ransomware Steel Art Signs id14755 View details Canada Manufacturing / Engineering
    Ransomware FortyEighty Architecture id14709 View details United States Construction / Real Estate
    Ransomware RobbJack & Crystallume id14708 View details United States Public Sector
    Ransomware Universal Companies id14707 View details United States Public Sector
    Ransomware Eagle Recovery Associates id14664 View details United States Public Sector
    Ransomware AnVa Industries id14663 View details Sweden Other
    Ransomware Smoker's Choice id14662 View details United States Public Sector
    Ransomware Saratoga Liquor id14661 View details United States Public Sector
    Ransomware Accounting Resource Group id14660 View details United States Finance / Legal / Insurance
    Ransomware Aaren Scientific id14657 View details United States Other
    Ransomware Creative Consumer Concepts id14616 View details United States Communication / Marketing
    Ransomware Power Torque Services id14615 View details United States Energy
    Ransomware C&L Ward id14604 View details United States Public Sector
    Ransomware Wilmington Convention Center id14603 View details United States Public Sector
    Ransomware Guerriere & Halnon id14602 View details United States Public Sector
    Ransomware Markdom Plastic Products id14601 View details Canada Manufacturing / Engineering
    Ransomware Pete's Road Service id14600 View details United States Public Sector
    Ransomware Affirm Agency id14508 View details United States Communication / Marketing
    Ransomware InteriorWorx Commercial Flooring id14507 View details United States Public Sector
    Ransomware Performance Food Centers id14506 View details United States Agriculture / Food
    Ransomware Reutter id14505 View details Germany Other
    Ransomware 4B Components id14504 View details United States Manufacturing / Engineering
    Ransomware Andantex USA id14503 View details United States Public Sector
    Ransomware G/S Solutions id14502 View details United States Services
    Ransomware Condere Ip, Infracom Group id14501 View details Sweden Services
    Ransomware The Rubber Resources id14500 View details United States Public Sector
    Ransomware Classic Business Products id14499 View details United States Services
    Ransomware Garvey id14498 View details United States Public Sector
    Ransomware Mile Hi Foods id14472 View details United States Agriculture / Food
    Ransomware PetEdge id14445 View details United States Public Sector
    Ransomware BroadGrain Commodities id14429 View details Canada Agriculture / Food
    Ransomware Eurobulk id14428 View details Greece Other
    Ransomware Jackson Paper Manufacturing id14404 View details United States Manufacturing / Engineering
    Ransomware Messe C id14403 View details Denmark Other
    Ransomware Noble Environmental id14402 View details United States Public Sector
    Ransomware Omega Industries id14401 View details United States Public Sector
    Ransomware Pacific Coast Building Products id14400 View details United States Construction / Real Estate
    Ransomware Thompson Construction Supply id14399 View details United States Construction / Real Estate
    Ransomware Plaisted Companies id14359 View details United States Public Sector
    Ransomware Baskervill id14347 View details United States Public Sector
    Ransomware Protective Industrial Products id14346 View details United States Communication / Marketing
    Ransomware Inktel id14345 View details United States Public Sector
    Ransomware Rsp id14344 View details Canada Other
    Ransomware Hariri Pontarini Architects id14343 View details Canada Other
    Ransomware Multidata id14342 View details Luxembourg Other