Play
Play is a ransomware group known for double-extortion attacks against businesses and public-sector organizations.
1322tracked breaches
3linked methods
Methods used
Breaches linked to Play
February 13, 2026HIGH
February 13, 2026HIGH
February 13, 2026HIGH
February 11, 2026HIGH
February 11, 2026HIGH
February 11, 2026HIGH
February 11, 2026HIGH
February 7, 2026HIGH
February 7, 2026HIGH
February 4, 2026HIGH
February 4, 2026HIGH
January 31, 2026HIGH
January 30, 2026HIGH
January 30, 2026HIGH
January 30, 2026HIGH
January 28, 2026HIGH
January 26, 2026HIGH
January 26, 2026HIGH
January 25, 2026HIGH
January 23, 2026HIGH
January 23, 2026HIGH
January 23, 2026HIGH
January 23, 2026HIGH
January 22, 2026HIGH
January 21, 2026HIGH
Heartland Title Services Listed by Play Ransomware Group
Play Ransomware
February 13, 2026HIGHUnified Engineering Listed by Play Ransomware Group
Play Ransomware
February 13, 2026HIGHHMA Listed by Play Ransomware Group
Play Ransomware
February 11, 2026HIGHMakivik Listed by Play Ransomware Group
Play Ransomware
February 11, 2026HIGHCatalanatto & Barnes Listed by Play Ransomware Group
Play Ransomware
February 11, 2026HIGHNorthbridge Listed by Play Ransomware Group
Play Ransomware
February 11, 2026HIGHAltak Listed by Play Ransomware Group
Play Ransomware
February 7, 2026HIGHIlderton Contracting Listed by Play Ransomware Group
Play Ransomware
February 7, 2026HIGHESS Metron Listed by Play Ransomware Group
Play Ransomware
February 4, 2026HIGHDe Gruyter Brill Listed by Play Ransomware Group
Play Ransomware
February 4, 2026HIGHISTS Listed by Play Ransomware Group
Play Ransomware
January 31, 2026HIGHTransaction Packing Inc Listed by RansomHouse Ransomware Group
RansomHousePlay Ransomware
January 30, 2026HIGHRAL Companies Listed by Play Ransomware Group
Play Ransomware
January 30, 2026HIGHBloom's Bus Lines Listed by Play Ransomware Group
Play Ransomware
January 30, 2026HIGHLusamerica Foods Listed by Play Ransomware Group
Play Ransomware
January 28, 2026HIGHKaiserAir Listed by Play Ransomware Group
Play Ransomware
January 26, 2026HIGHTele Plus Listed by Play Ransomware Group
Play Ransomware
January 26, 2026HIGHDeatak Listed by Play Ransomware Group
Play Ransomware
January 25, 2026HIGHBar S Services Listed by Play Ransomware Group
Play Ransomware
January 23, 2026HIGHF&B Mfg Listed by Play Ransomware Group
Play Ransomware
January 23, 2026HIGHCBH Homes Listed by Play Ransomware Group
Play Ransomware
January 23, 2026HIGHSpring Brook Country Club Listed by Play Ransomware Group
Play Ransomware
January 23, 2026HIGHNAI Plotkin Listed by Play Ransomware Group
Play Ransomware
January 22, 2026HIGHQuantum Fuel Systems Technologies Listed by Play Ransomware Group
Play Ransomware
January 21, 2026HIGHWoodfield Listed by Play Ransomware Group
Play Ransomware
Were you caught in one of these?
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.