Play Ransomware Strikes Due Doyle Fanning

On January 6, 2026 , the ransomware group Play publicly claimed responsibility for a cyberattack against Due Doyle Fanning ( duedoyle.com ), a prominent U.S. legal firm. The group posted an extortion notice indicating that sensitive data would be leaked unless negotiations were initiated.

Ransomware attacks are increasingly targeting both enterprise and mid-sized organizations across all sectors. The following steps are critical to reduce impact and prevent future incidents:

At DeXpose, we specialize in early detection and proactive defense. Our hybrid threat intelligence solution combines automated deep/dark web crawling, Telegram and forum monitoring, and real analyst verification to deliver:

Don’t wait for public disclosure or ransom notices—gain visibility into your cyber exposure now.

DeXpose does not engage in the exfiltration, hosting, redistribution, or purchase of stolen data. All breach information reported here is collected from publicly accessible dark web sources and threat intelligence platforms. Our mission is to equip organizations with early-warning indicators, contextual threat insights, and actionable intelligence that help them secure their digital assets against evolving cyber threats.