Miller Boskus Lack Architects Listed by play Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On March 06, 2024, the United States architecture firm Miller Boskus Lack Architects was listed by the ransomware group known as play. Public reporting states that internal files were exfiltrated in a ransomware attack, though the number of people affected remains unknown and further operational details have not been disclosed. The listing itself is a claim by the group rather than an independently verified confirmation of every asserted detail.

For clients, employees, partners and others who may have shared information with the firm, the incident raises practical questions about what material left the organisation’s systems and what residual risk that creates. Available public facts are limited; this account stays strictly within those facts while outlining the broader context that makes such an event consequential.

What happened

According to the reported summary, Miller Boskus Lack Architects appeared on the leak site associated with the play ransomware group on March 06, 2024. The group claims that internal files were exfiltrated as part of a ransomware attack. No public figure has been given for the volume of data taken, the precise date the intrusion began or ended, the initial access method, or the number of individuals whose information may be involved. Those elements remain undisclosed. The organisation is identified as operating in the United States. Beyond the claim of file exfiltration and the listing date, no additional technical indicators or confirmation of data publication have been supplied in the available record.

Inside play

Play is a ransomware operation that has been publicly documented since approximately 2022. Like many contemporary groups, it typically employs a double-extortion model: encrypting systems while also copying data and threatening to publish or sell it if a ransom is not paid. The group maintains a leak site on which it lists claimed victims, often posting samples or larger archives to increase pressure. Public reporting has associated play with attacks across multiple sectors and geographies, frequently targeting mid-sized organisations that hold proprietary or regulated information. Tactics commonly attributed to the group in open sources include the use of compromised credentials, exploitation of exposed remote-access services, and living-off-the-land techniques once inside a network. These are general, well-established patterns of the actor; none of them have been specifically confirmed for the Miller Boskus Lack Architects incident beyond the group’s own listing claim.

Who is Miller Boskus Lack Architects?

Miller Boskus Lack Architects is an architecture practice based in the United States. Firms of this type design buildings and spaces for public, commercial and private clients. In the ordinary course of business they generate and store project drawings, specifications, contracts, correspondence, financial records, employee personnel files and client contact details. They may also hold sensitive site information, intellectual property related to designs, and data covered by professional confidentiality obligations. A ransomware incident that includes claimed data exfiltration therefore touches both the firm’s operational continuity and the privacy interests of the people and organisations whose material resides in its systems. Architecture practices are not typically high-profile targets in the public imagination, yet the concentration of project and personal data they hold makes them attractive to actors seeking leverage or resale value.

What was likely exposed

The only data type named in the available facts is “internal files” said to have been exfiltrated. No inventory, file counts, or categories such as employee records, client lists or design documents have been publicly itemised. Organisations of this kind routinely maintain project files, contracts, invoices, emails, personnel information and client-related materials. Whether any of those categories were among the files taken, and whether any of the material has been published or circulated further, remains unconfirmed. Readers should treat the precise contents as unknown until the firm or independent investigators provide additional verified detail.

What's at stake

For individuals whose information may have been among the internal files, the concrete risks include potential misuse of contact details, identity-related fraud if personal identifiers were present, or exposure of private correspondence. Clients could face competitive or reputational harm if proprietary project information appears outside authorised channels. For the firm itself, the stakes include operational disruption from any encryption component of the attack, legal and regulatory notification duties, possible contractual claims from clients, and the longer-term cost of forensic investigation and system hardening. Because the scale of the exfiltration and the identities of affected parties have not been disclosed, the actual exposure for any given person cannot yet be quantified; the risk is therefore best understood as potential rather than proven for most individuals.

What to do if you're exposed

If you have a past or present relationship with Miller Boskus Lack Architects—as a client, employee, contractor or vendor—treat the situation as a prompt for basic hygiene rather than panic. Monitor financial and credit accounts for unexpected activity, enable multi-factor authentication on email and other critical services, and be alert to phishing that might reference the firm or architecture projects. If you receive notification from the organisation, follow the specific guidance it provides. As a further practical step, you can run a free exposure scan of your email address to check whether that address has already appeared in known breach datasets; such a scan does not confirm or rule out involvement in this particular incident, but it offers a quick way to see whether your information is circulating more broadly.

AICompiled with AI assistance from public sources and published under our editorial standards.