Ransomware Group intelligence

Play

Active

Track Play with 1297 published victims and 4 known leak locations in a single intelligence view.

Victims 1297 Known published victims in this dataset
First discovered 2022-11-26 Earliest victim discovery date
Last discovered 2026-07-16 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 929 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Play is tracked by Breach House as a ransomware group with 1297 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 2 Onion service Unknown k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion
    Leak location 3 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 4 Onion service Unknown j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (1297)

    Search, filter and paginate the victim timeline for Play. Showing 801–900 of 1297.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Elmhurst Group id12775 View details United States Public Sector
    Ransomware WALSER AUTOMOTIVE GROUP id12774 View details United States Manufacturing / Engineering
    Ransomware FPL Food id12773 View details United States Agriculture / Food
    Ransomware Ntv id12772 View details Canada Other
    Ransomware Credit Central id12771 View details United States Finance / Legal / Insurance
    Ransomware Ryder Scott Co. id12670 View details United States Public Sector
    Ransomware Tri-state General Contractors id12669 View details United States Public Sector
    Ransomware Starostwo Powiatowe w Świebodzinie id12668 View details Poland Other
    Ransomware Aspire Tax id12667 View details United States Public Sector
    Ransomware The Louis G Freeman id12666 View details United States Public Sector
    Ransomware Experis Technology Group id12665 View details United States IT
    Ransomware Anchorage Daily News id12664 View details United States Public Sector
    Ransomware RDI-USA id12663 View details United States Healthcare / Pharma
    Ransomware Ardenbrook id12662 View details United States Public Sector
    Ransomware Visa Lighting id12661 View details United States Public Sector
    Ransomware Semicore Equipment id12660 View details United States Public Sector
    Ransomware Levin Porter Associates id12659 View details United States Public Sector
    Ransomware LiveHelpNow id12494 View details United States Public Sector
    Ransomware NK Parts Industries id12493 View details United States Manufacturing / Engineering
    Ransomware Badger Tag & Label id12492 View details United States Public Sector
    Ransomware Haumiller Engineering id12491 View details United States Manufacturing / Engineering
    Ransomware Central Florida Equipment id12346 View details United States Public Sector
    Ransomware High Performance Services id12345 View details United States Services
    Ransomware Mauritzon id12344 View details United States Public Sector
    Ransomware Somerville id12343 View details United States Public Sector
    Ransomware Donco Air id12342 View details United States Public Sector
    Ransomware Affordable Payroll & Bookkeeping Services id12341 View details United States Services
    Ransomware Utica Mack id12340 View details United States Public Sector
    Ransomware KC Scout id12339 View details United States Public Sector
    Ransomware Sentry Data Management id12338 View details United States Services
    Ransomware Stainless Foundry & Engineering id12253 View details United States Manufacturing / Engineering
    Ransomware Canatal Industries id12240 View details United States Public Sector
    Ransomware Advanced Business Networks id12200 View details United States Telecommunications
    Ransomware Profile Products id12199 View details United States Communication / Marketing
    Ransomware C?????l I????????s id12195 View details Canada Other
    Ransomware Axip Energy Services id12164 View details United States Energy
    Ransomware Original Herkimer Cheese id12162 View details United States Public Sector
    Ransomware Precision Fluid Controls id12161 View details United States Communication / Marketing
    Ransomware Yale Mortgage id12160 View details United States Public Sector
    Ransomware Madata id12159 View details Mexico Other
    Ransomware Legislative Bill Drafting Commission id12158 View details United States Public Sector
    Ransomware Toolmarts id12157 View details United States Public Sector
    Ransomware New Hudson Facades id12156 View details United States Public Sector
    Ransomware Alltruck Bodies id11732 View details Australia Other
    Ransomware SIS Automatisering id11731 View details Netherlands Other
    Ransomware Pennsylvania Convention Center id11730 View details United States Public Sector
    Ransomware Engineered Automation of Maine id11729 View details United States Public Sector
    Ransomware JE Owens id11728 View details United States Public Sector
    Ransomware P??????? & ???? id11727 View details United States Public Sector
    Ransomware Heritage Cooperative id11680 View details United States Public Sector
    Ransomware Feldstein & Stewart id11634 View details United States Public Sector
    Ransomware Agate Construction id11633 View details United States Construction / Real Estate
    Ransomware H??????? C?????????? id11632 View details United States Public Sector
    Ransomware MoldTech id11620 View details United States IT
    Ransomware Theatrixx Technologies id11619 View details Canada IT
    Ransomware Access Intelligence id11618 View details United States Public Sector
    Ransomware New England Wooden Ware id11617 View details United States Public Sector
    Ransomware LS Networks id11616 View details United States Telecommunications
    Ransomware The MBTW Group id11615 View details Canada Services
    Ransomware F???s???? & ??????t id11598 View details United States Public Sector
    Ransomware Sit id11518 View details United States Public Sector
    Ransomware Guy's Floor Service id11517 View details United States Public Sector
    Ransomware Everbrite id11516 View details United States Public Sector
    Ransomware Wyoming Machinery id11472 View details United States Manufacturing / Engineering
    Ransomware W?????? ????????y id11457 View details United States Public Sector
    Ransomware Pavilion Construction id11418 View details United States Construction / Real Estate
    Ransomware Boingo Graphics id11417 View details United States NGOs / Associations
    Ransomware Tbr Kowalczyk id11405 View details Poland Other
    Ransomware JM Thompson id11404 View details United States Public Sector
    Ransomware Weld Plus id11403 View details United States Public Sector
    Ransomware Festspielhaus Baden-Baden id11401 View details Germany Other
    Ransomware West Monroe id11400 View details United States Public Sector
    Ransomware Frawner id11399 View details United States Public Sector
    Ransomware Alber Law Group id11398 View details United States Finance / Legal / Insurance
    Ransomware Hartz id11397 View details United States Public Sector
    Ransomware Quality Enclosures id11396 View details United States Public Sector
    Ransomware Lawrence Semiconductor Research Laboratory id11395 View details United States Finance / Legal / Insurance
    Ransomware Lambda Energy Resources id11394 View details United States Energy
    Ransomware QEO Group id11203 View details United States Public Sector
    Ransomware Schokinag id11180 View details Germany Other
    Ransomware Zips Car Wash id11179 View details United States Public Sector
    Ransomware Bechtold id11178 View details Germany Other
    Ransomware Canada Revenue Agency id11177 View details Canada Communication / Marketing
    Ransomware White Oak Partners id11176 View details United States Public Sector
    Ransomware Ruda Auto id11175 View details United States Public Sector
    Ransomware Image Pointe id11174 View details United States Public Sector
    Ransomware Grassmid Transport id11173 View details United States Transportation / Travel / Logistics
    Ransomware Fashion UK id11172 View details United Kingdom Other
    Ransomware QI Group id11171 View details Canada Services
    Ransomware BiTec id11170 View details United States Public Sector
    Ransomware Bridger Insurance id11169 View details United States Finance / Legal / Insurance
    Ransomware SREE Hotels id11168 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Q?? ??o?? id11167 View details United States Public Sector
    Ransomware Premier Technology id11166 View details United States IT
    Ransomware Continental Aerospace Technologies id11144 View details United States IT
    Ransomware MainVest id11125 View details United States Public Sector
    Ransomware C?????????? A???????e T??????????? id11124 View details United States Public Sector
    Ransomware K???o??? id11110 View details United States Public Sector
    Ransomware Skyland Grain id11066 View details United States Agriculture / Food
    Ransomware American Nuts id11065 View details United States Public Sector