Scworld Brokk Hacked by Play Ransomware Gang, Data Threatened with Leak
Article Content
- •Brokk was allegedly hacked by the Russia-linked Play ransomware gang.
- •A 4GB dataset containing sensitive corporate data has been threatened with public release.
- •The Play ransomware gang has claimed over 1,100 victims since its emergence.
Brokk, a Swedish manufacturer of remote-controlled demolition machinery, was allegedly hacked by the Play ransomware gang, which is linked to Russia. The gang has threatened to leak a 4GB dataset containing sensitive internal corporate information if their ransom demands are not met. The stolen data reportedly includes financial details, budgets, payroll, IDs, taxes, and client files. Cybernews reported that the legitimacy of the claims has not been independently verified, but the potential reputational damage to Brokk is significant. The Play ransomware gang has been active since 2023, claiming over 1,100 victims, with recent targets including Jamco Aerospace. Brokk has not yet responded to inquiries regarding the breach. The incident highlights the ongoing threat posed by ransomware operations and the risks associated with data breaches.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Play and ADC Aerospace in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…