Play
Play is a ransomware group known for double-extortion attacks against businesses and public-sector organizations.
1322tracked breaches
3linked methods
Methods used
Breaches linked to Play
December 26, 2025HIGH
December 24, 2025HIGH
December 20, 2025HIGH
December 18, 2025HIGH
December 11, 2025HIGH
December 11, 2025HIGH
December 9, 2025HIGH
December 8, 2025HIGH
December 1, 2025HIGH
November 26, 2025HIGH
November 25, 2025HIGH
November 25, 2025HIGH
November 25, 2025HIGH
November 24, 2025HIGH
November 24, 2025HIGH
November 24, 2025HIGH
November 21, 2025HIGH
November 21, 2025HIGH
November 19, 2025HIGH
November 18, 2025HIGH
November 18, 2025HIGH
November 18, 2025HIGH
November 18, 2025HIGH
November 17, 2025HIGH
November 17, 2025HIGH
Due Doyle Fanning Listed by Play Ransomware Group
Play Ransomware
December 24, 2025HIGHLaunie & Marino Listed by Play Ransomware Group
Play Ransomware
December 20, 2025HIGHSecurity ONE Alarm Systems Listed by Play Ransomware Group
Play Ransomware
December 18, 2025HIGHBenise-Dowling & Associates Listed by Play Ransomware Group
Play Ransomware
December 11, 2025HIGHGordon/Clifford Realty Listed by Play Ransomware Group
Play Ransomware
December 11, 2025HIGHKucera International Listed by Play Ransomware Group
Play Ransomware
December 9, 2025HIGHMill Brothers Listed by Play Ransomware Group
Play Ransomware
December 8, 2025HIGHAllure Home Creation Listed by Play Ransomware Group
Play Ransomware
December 1, 2025HIGHPHA Body Systems Listed by Play Ransomware Group
Play Ransomware
November 26, 2025HIGHChoates HVAC Listed by Play Ransomware Group
Play Ransomware
November 25, 2025HIGHEastman Cooke Listed by Play Ransomware Group
Play Ransomware
November 25, 2025HIGHUniversity Loft Listed by Play Ransomware Group
Play Ransomware
November 25, 2025HIGHFairgrove Oil Listed by Play Ransomware Group
Play Ransomware
November 24, 2025HIGHRelease Marine Listed by Play Ransomware Group
Play Ransomware
November 24, 2025HIGHSouth Island Public Service District Listed by Play Ransomware Group
Play Ransomware
November 24, 2025HIGHJabezco Industrial Group Listed by Play Ransomware Group
Play Ransomware
November 21, 2025HIGHHall Aluminum Products Listed by Play Ransomware Group
Play Ransomware
November 21, 2025HIGHClark & Sullivan Constructors Listed by Play Ransomware Group
Play Ransomware
November 19, 2025HIGHViga Eatery Listed by Play Ransomware Group
Play Ransomware
November 18, 2025HIGHKeystone Fabricating Listed by Play Ransomware Group
Play Ransomware
November 18, 2025HIGHMaypay Farms Inc Listed by Play Ransomware Group
Play Ransomware
November 18, 2025HIGHKatch Kan Listed by Play Ransomware Group
Play Ransomware
November 18, 2025HIGHTurkstra Trusses Listed by Play Ransomware Group
Play Ransomware
November 17, 2025HIGHRadio Sound Listed by Play Ransomware Group
Play Ransomware
November 17, 2025HIGHApplied Energy Systems Listed by Play Ransomware Group
Play Ransomware
Were you caught in one of these?
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.