Play
Play is a ransomware group known for double-extortion attacks against businesses and public-sector organizations.
1322tracked breaches
3linked methods
Methods used
Breaches linked to Play
February 13, 2026HIGH
February 13, 2026HIGH
February 13, 2026HIGH
February 11, 2026HIGH
February 11, 2026HIGH
February 11, 2026HIGH
February 11, 2026HIGH
February 7, 2026HIGH
February 7, 2026HIGH
February 4, 2026HIGH
February 4, 2026HIGH
January 31, 2026HIGH
January 30, 2026HIGH
January 30, 2026HIGH
January 30, 2026HIGH
January 28, 2026HIGH
January 26, 2026HIGH
January 26, 2026HIGH
January 25, 2026HIGH
January 23, 2026HIGH
January 23, 2026HIGH
January 23, 2026HIGH
January 23, 2026HIGH
January 22, 2026HIGH
January 21, 2026HIGH
January 20, 2026HIGH
January 20, 2026HIGH
January 19, 2026HIGH
January 18, 2026HIGH
January 17, 2026HIGH
January 15, 2026HIGH
January 14, 2026HIGH
January 13, 2026HIGH
January 12, 2026HIGH
January 12, 2026HIGH
January 9, 2026HIGH
January 6, 2026HIGH
January 4, 2026HIGH
January 2, 2026HIGH
December 29, 2025HIGH
December 29, 2025HIGH
December 29, 2025HIGH
December 28, 2025HIGH
December 26, 2025HIGH
December 26, 2025HIGH
December 26, 2025HIGH
December 26, 2025HIGH
December 26, 2025HIGH
December 26, 2025HIGH
December 26, 2025HIGH
Heartland Title Services Listed by Play Ransomware Group
Play Ransomware
February 13, 2026HIGHUnified Engineering Listed by Play Ransomware Group
Play Ransomware
February 13, 2026HIGHHMA Listed by Play Ransomware Group
Play Ransomware
February 11, 2026HIGHMakivik Listed by Play Ransomware Group
Play Ransomware
February 11, 2026HIGHCatalanatto & Barnes Listed by Play Ransomware Group
Play Ransomware
February 11, 2026HIGHNorthbridge Listed by Play Ransomware Group
Play Ransomware
February 11, 2026HIGHAltak Listed by Play Ransomware Group
Play Ransomware
February 7, 2026HIGHIlderton Contracting Listed by Play Ransomware Group
Play Ransomware
February 7, 2026HIGHESS Metron Listed by Play Ransomware Group
Play Ransomware
February 4, 2026HIGHDe Gruyter Brill Listed by Play Ransomware Group
Play Ransomware
February 4, 2026HIGHISTS Listed by Play Ransomware Group
Play Ransomware
January 31, 2026HIGHTransaction Packing Inc Listed by RansomHouse Ransomware Group
RansomHousePlay Ransomware
January 30, 2026HIGHRAL Companies Listed by Play Ransomware Group
Play Ransomware
January 30, 2026HIGHBloom's Bus Lines Listed by Play Ransomware Group
Play Ransomware
January 30, 2026HIGHLusamerica Foods Listed by Play Ransomware Group
Play Ransomware
January 28, 2026HIGHKaiserAir Listed by Play Ransomware Group
Play Ransomware
January 26, 2026HIGHTele Plus Listed by Play Ransomware Group
Play Ransomware
January 26, 2026HIGHDeatak Listed by Play Ransomware Group
Play Ransomware
January 25, 2026HIGHBar S Services Listed by Play Ransomware Group
Play Ransomware
January 23, 2026HIGHF&B Mfg Listed by Play Ransomware Group
Play Ransomware
January 23, 2026HIGHCBH Homes Listed by Play Ransomware Group
Play Ransomware
January 23, 2026HIGHSpring Brook Country Club Listed by Play Ransomware Group
Play Ransomware
January 23, 2026HIGHNAI Plotkin Listed by Play Ransomware Group
Play Ransomware
January 22, 2026HIGHQuantum Fuel Systems Technologies Listed by Play Ransomware Group
Play Ransomware
January 21, 2026HIGHWoodfield Listed by Play Ransomware Group
Play Ransomware
January 20, 2026HIGHMilwaukee Forge Listed by Play Ransomware Group
Play Ransomware
January 20, 2026HIGHChristine London Listed by Play Ransomware Group
Play Ransomware
January 19, 2026HIGHAquatic Control Listed by Play Ransomware Group
Play Ransomware
January 18, 2026HIGHJoyva Listed by Play Ransomware Group
Play Ransomware
January 17, 2026HIGHCalifornia Tax Data Listed by Play Ransomware Group
Play Ransomware
January 15, 2026HIGHTREC Group Listed by Play Ransomware Group
Play Ransomware
January 14, 2026HIGHEncore Roofing Listed by Play Ransomware Group
Play Ransomware
January 13, 2026HIGHMidway Windows and Doors Listed by Play Ransomware Group
Play Ransomware
January 12, 2026HIGHRiverwood Golf Club Listed by Play Ransomware Group
Play Ransomware
January 12, 2026HIGHEastern Ice Listed by Play Ransomware Group
Play Ransomware
January 9, 2026HIGHCE Electronics Listed by Play Ransomware Group
Play Ransomware
January 6, 2026HIGHRoutten & Laster Law Listed by Play Ransomware Group
Play Ransomware
January 4, 2026HIGHRaymundos Food Group Listed by Play Ransomware Group
Play Ransomware
January 2, 2026HIGHGarner Foods Listed by Play Ransomware Group
Play Ransomware
December 29, 2025HIGHLakeside Title Company Listed by Play Ransomware Group
Play Ransomware
December 29, 2025HIGHGenoa Lakes Listed by Play Ransomware Group
Play Ransomware
December 29, 2025HIGHC&r Electric Listed by Play Ransomware Group
Play Ransomware
December 28, 2025HIGHWiZiX Technology Group Listed by Play Ransomware Group
Play Ransomware
December 26, 2025HIGHMP Filtri Listed by Play Ransomware Group
Play Ransomware
December 26, 2025HIGHJZ Russell Industries Listed by Play Ransomware Group
Play Ransomware
December 26, 2025HIGHPewarchuk CPA Listed by Play Ransomware Group
Play Ransomware
December 26, 2025HIGHWardell Builders Listed by Play Ransomware Group
Play Ransomware
December 26, 2025HIGHStoughton Steel Listed by Play Ransomware Group
Play Ransomware
December 26, 2025HIGHRockport Technology Group Listed by Play Ransomware Group
Play Ransomware
December 26, 2025HIGHDenny's 5th Avenue Bakery Listed by Play Ransomware Group
Play Ransomware
Were you caught in one of these?
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.