Threat actor
25 observed events
AIThe Play actor has been observed in 3 ransomware incidents, with two in the Technology sector. Affected countries include the US and Germany.
AIPlay ransomware group claims to have listed Signature Services on its extortion site. This is an unverified claim.
AIPlay ransomware group claims to have listed GCATS Investments on its extortion site, per RansomLook. This is an unverified claim.
AIPlay ransomware group claims to have listed Platinum Group on its extortion site. The listing is an unverified claim; no breach has been confirmed.
AIPlay ransomware group claims to have listed First Tek on its extortion site (per RansomLook). This is an unverified claim.
AIPlay listed Preferred Financial Group on its extortion site, claiming the organization as a victim. This is an unverified claim, with no confirmed breach or data details.
AIPlay claims to have listed First Tek, a technology-sector organization, on its extortion site. The listing is unverified.
AIPlay group claims to have listed Preferred Financial Group, a financial services firm, on its extortion site. This is an unverified allegation.
AIPlay claims to have listed The Butcher Brothers on its extortion site, per RansomLook. This is an unverified claim of a data leak, not a confirmed breach.
AIPlay ransomware group claims to have listed Sigma Plastics Group on its extortion site, per RansomLook. This is an unverified claim.
AIPlay group claims to have listed Cambridge Management on its extortion site, per RansomLook. This is an unverified claim.
AIPlay ransomware group claims to have listed retail/e-commerce organization The Butcher Brothers on its extortion site; this is an unverified claim.
AIThe Play ransomware group has listed Sigma Plastics Group, a manufacturing firm, on its extortion site, claiming to have stolen data. This claim is unverified.
AIPlay group claims to have listed Cambridge Management, a professional services firm, on its extortion site. This is an unverified claim.
AIPlay ransomware group claims to have breached Record Go Alquiler, a hospitality sector company.
AIThe Play ransomware group claims to have breached Restaurant Depot, a retail and e-commerce sector organization.
AIPlay ransomware group claims to have compromised The DeBruler, as listed on their ext
AIPlay ransomware group claims to have listed Tax MT on its extortion site; the claim is unverified.
AIPlay ransomware group claims to have listed Kreysler & Associates on its extortion site, per RansomLook. This claim is unverified.
AIPlay ransomware group claims to have breached Tax MT, a business services company, listing it on their extortion site; the claim is unverified.
AIPlay group claims to have data from Kreysler & Associates, a business services firm, per an extortion site listing.
AIPlay ransomware group claims to have breached Boston Electric and Telephone, a telecommunications organization.
AIWring Group was listed by Play ransomware on their extortion site, according to Ransomware.live. The claim is unverified.
AIPlay ransomware group claims to have breached AG Scholtes, a manufacturing company, as listed on Ransomware.live.
AIThe Play ransomware group claims to have breached Andorra Life, a healthcare organization, as per a listing on their extortion site.
AIThe Play ransomware group claims to have attacked Svensk Direktreklam, a business services firm, according to a Ransomware.live listing.