Play
Play is a ransomware group known for double-extortion attacks against businesses and public-sector organizations.
1322tracked breaches
3linked methods
Methods used
Breaches linked to Play
October 23, 2025HIGH
October 23, 2025HIGH
October 23, 2025HIGH
October 21, 2025HIGH
October 21, 2025HIGH
October 20, 2025HIGH
October 19, 2025HIGH
October 17, 2025HIGH
October 15, 2025HIGH
October 14, 2025HIGH
October 14, 2025HIGH
October 13, 2025HIGH
October 12, 2025HIGH
October 11, 2025HIGH
October 8, 2025HIGH
October 1, 2025HIGH
October 1, 2025HIGH
October 1, 2025HIGH
September 29, 2025HIGH
September 23, 2025HIGH
September 23, 2025HIGH
September 22, 2025HIGH
September 21, 2025HIGH
September 21, 2025HIGH
September 21, 2025HIGH
Ouranos Listed by Play Ransomware Group
Play Ransomware
October 23, 2025HIGHEvogence Listed by Play Ransomware Group
Play Ransomware
October 23, 2025HIGHTavo Packaging Inc Listed by Play Ransomware Group
Play Ransomware
October 21, 2025HIGHWright Tool Listed by Play Ransomware Group
Play Ransomware
October 21, 2025HIGHFast Freight Listed by Play Ransomware Group
Play Ransomware
October 20, 2025HIGHLaBonne Listed by Play Ransomware Group
Play Ransomware
October 19, 2025HIGHAccord Carton Listed by Payoutsking Ransomware Group
PayoutskingPlay Ransomware
October 17, 2025HIGHSylvester Roofing Listed by Play Ransomware Group
Play Ransomware
October 15, 2025HIGHGlobal Shop Solutions Listed by Play Ransomware Group
Play Ransomware
October 14, 2025HIGHMetal Pros Listed by Play Ransomware Group
Play Ransomware
October 14, 2025HIGHCottage Listed by Play Ransomware Group
PlayQilin Ransomware
October 13, 2025HIGHNational Coatings Listed by Play Ransomware Group
Play Ransomware
October 12, 2025HIGHCellucap Manufacturing Listed by Play Ransomware Group
Play Ransomware
October 11, 2025HIGHLegacy Manufacturing Listed by Play Ransomware Group
Play Ransomware
October 8, 2025HIGHNelligan White Architects Listed by Play Ransomware Group
Play Ransomware
October 1, 2025HIGHBMP Worldwide Listed by Play Ransomware Group
Play Ransomware
October 1, 2025HIGHElmer W. Davis Listed by Play Ransomware Group
Play Ransomware
October 1, 2025HIGHAccelerated Listed by Play Ransomware Group
Play Ransomware
September 29, 2025HIGHDataforth Listed by Play Ransomware Group
Play Ransomware
September 23, 2025HIGHPangborn Listed by Play Ransomware Group
Play Ransomware
September 23, 2025HIGHComTec Systems Listed by Play Ransomware Group
PlayPear Ransomware
September 22, 2025HIGHVcinity Listed by Play Ransomware Group
Play Ransomware
September 21, 2025HIGHSteve Basso Plumbing Heating Listed by Play Ransomware Group
Play Ransomware
September 21, 2025HIGHWaterborne Environmental Listed by Play Ransomware Group
Play Ransomware
September 21, 2025HIGHKomar Industries Listed by Play Ransomware Group
Play Ransomware
Were you caught in one of these?
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.