Skip to content
Leak site of play, captured by ThreatCluster

play

Inactive

25 tracked victims · First seen Nov 26, 2022 · Last seen Oct 16, 2026

About

Summarised by ThreatCluster from the group's own leak site

Play ransomware's homepage lists victim organisations with country, links, and publication status, along with a countdown-style publication schedule and a note about not providing RaaS.

Sectors: Manufacturing, Business Services, Technology · Countries: US, CA, DE

Recent victims

View all →
VictimSectorCountryDataPostedStatus
Tailormade LogisticsTransportationDK???? gbOct 27, 2026countdown
Coast 2 CoastReal Estate & ConstructionUS???? gbOct 27, 2026countdown
VPC BuildersConstructionUS—Oct 27, 2026
HygienaHealthcareUS???? gbOct 27, 2026countdown
Money Concepts CapitalFinanceUnited States—Oct 27, 2026listed
MicroSearchIT Services and IT Consulting???? gbOct 27, 2026listed
QLCIndustrial Machinery & EquipmentUS???? gbOct 27, 2026countdown
WSBI-ESBGFinancial ServicesBE???? gbOct 16, 2026listed
New Tec Tool LimitedManufacturingHK???? gbOct 16, 2026listed
MicroSearch CorporationIT Consulting???? gbOct 16, 2026listed
Pure OptionsConvenience Stores???? gbOct 16, 2026
The Innovation GroupBusiness ServicesUnited States???? gbOct 13, 2026listed
DFK GroupProfessional ServicesDE???? gbOct 13, 2026listed
Saddlers Court MFGManufacturingGB???? gbOct 13, 2026listed
Culinary SpecialtiesFood & BeverageUS???? gbOct 13, 2026listed
Advanced Imaging SolutionsBusiness ServicesMN???? gbOct 13, 2026listed
Bold Spring NurseryAgricultureUnited States???? gbOct 4, 2026
Silicon Valley GlassConstruction ManagementUS???? gbOct 4, 2026countdown
TitusRetailGermany???? gbSep 30, 2026listed
Airtech Mechanical ServicesConstruction ManagementUS—Sep 30, 2026
Orth AutomobileAutomobile DealersDE—Sep 30, 2026
Starr Whitehouse Landscape ArchitectsArchitecture and PlanningUS???? gbSep 28, 2026listed
Ever Ready First AidHealthcareUS???? gbSep 28, 2026listed
MetallcoBuilding MaterialsBR???? gbSep 21, 2026
HurleyConstructionUS???? gbSep 21, 2026

All ransomware groups · Dark web intelligence