Ransomware Group intelligence

Play

Active

Track Play with 1309 published victims and 4 known leak locations in a single intelligence view.

Victims 1309 Known published victims in this dataset
First discovered 2022-11-26 Earliest victim discovery date
Last discovered 2026-07-23 Latest victim discovery date
Inactive since 5 days Days since the latest known victim
Top country United States 934 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Play is tracked by Breach House as a ransomware group with 1309 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 2 Onion service Unknown k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion
    Leak location 3 Onion service Unknown mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion
    Leak location 4 Onion service Unknown j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (1309)

    Search, filter and paginate the victim timeline for Play. Showing 1301–1309 of 1309.

    Type Target Discovered Country Business Category Intel Link
    Ransomware ??????????? id4681 View details Other
    Ransomware ???? ????? id4680 View details Other
    Ransomware PVFCCo id4669 View details Other
    Ransomware Leadtek id4668 View details Other
    Ransomware Alcomet id4667 View details Other
    Ransomware Ministry of Transport and Public Works id4666 View details Public Sector
    Ransomware Itsgroup id4665 View details Services
    Ransomware Conseil departemental - Alpes-Maritimes id4664 View details Other
    Ransomware Origin Property Company Limited id4663 View details Construction / Real Estate