AD
Oct 13, 2026
• Healthcare Technology
Play
Play ransomware has claimed Advanced Imaging Solutions (Minnesota, US) on its leak site. SOCRadar CTI analysis reveals remote access infrastructure credential exposure as a key initial access indicator.
View details →
CU
Oct 13, 2026
• Business Services
Play
Play ransomware has claimed Culinary Specialties, a US food production company, on its leak site. SOCRadar CTI analysis includes stealer-log context and food sector risk assessment.
View details →
SA
Oct 13, 2026
• Manufacturing
Play
Play ransomware has claimed Saddlers Court MFG, a UK manufacturing firm, on its leak site. SOCRadar CTI analysis includes stealer-log context and manufacturing sector risk assessment.
View details →
DF
Oct 13, 2026
• Business Services
Play
Play ransomware has claimed DFK Group, a German professional services firm with global affiliate network, on its leak site. SOCRadar CTI analysis includes stealer-log context.
View details →
TH
Oct 14, 2026
• Business Services
Play
Play ransomware has claimed The Innovation Group, a US consulting and technology firm, on its leak site. SOCRadar CTI analysis includes stealer-log context and supply-chain risk.
View details →
ST
Oct 2, 2026
• Healthcare
Play
St. Francis Healthcare HI was listed on Wallstreet's dark web leak site on October 2, 2026. SOCRadar CTI examines the Wallstreet group's healthcare targeting pattern and sector risk…
View details →
AH
Sep 28, 2026
• Professional Services
INC Ransom
AHEAD, a company in the United States, was listed as a victim of INC Ransom ransomware group on September 28, 2026.
View details →
RE
Aug 24, 2026
• Retail & E-Commerce
Krybit
Resi, a Retail & E-Commerce company in Germany, was listed as a victim of Krybit ransomware on August 24, 2026.
View details →
BE
Aug 20, 2026
• Media & Entertainment
Play
Be Media, a technology company in the United States, was listed as a victim of Play ransomware on August 20, 2026.
View details →
LA
Aug 20, 2026
• Business Services
Play
Latoplast, a manufacturing company in Latvia, was listed as a victim of Play ransomware on August 20, 2026.
View details →
SI
Aug 19, 2026
• Manufacturing
Krybit
S.I.P.R.E.S. SRL, a manufacturing company in Italy, was listed as a victim of Krybit ransomware group on August 19, 2026.
View details →
CO
Aug 18, 2026
• Technology
Play
Coltrane Systems, a technology company in the United States, was listed as a victim of Play ransomware on August 18, 2026.
View details →
WO
Aug 17, 2026
• Business Services
Play
Woodhaven Association, an organization in the United States, was listed as a victim of Play ransomware on August 17, 2026.
View details →
SA
Aug 17, 2026
• Automotive
Play
Sam Pack Auto Group, a Retail & E-Commerce company in the United States, was listed as a victim of Play ransomware on August 17, 2026.
View details →
BR
Aug 17, 2026
• Finance
Play
Bridgeport Capital Services, a Financial Services company in the United States, was listed as a victim of Play ransomware on August 17, 2026.
View details →
SI
Aug 6, 2026
• Business Services
Play
Signature Services, a professional services company in the United States, was listed as a victim of Play ransomware on August 6, 2026.
View details →
GC
Aug 6, 2026
• Financial Services
Play
GCATS Investments, a financial services company in the United States, was listed as a victim of Play ransomware on August 6, 2026.
View details →
PL
Aug 6, 2026
• Manufacturing
Play
Platinum Group, a manufacturing company in Singapore, was listed as a victim of Play ransomware on August 6, 2026.
View details →
IN
Jul 30, 2026
• Business Services
Play
Indus Protech Solutions, a technology company in India, was listed as a victim of The Gentlemen ransomware on July 30, 2026.
View details →
KR
Jul 21, 2026
• Business Services
Play
Kreysler & Associates, a business services company in the United States, was listed as a victim of Play ransomware on July 21, 2026.
View details →
BO
Jul 16, 2026
• Business Services
Play
Boston Electric and Telephone, a telecommunication company in the United States, was listed as a victim of Play ransomware on July 16, 2026.
View details →
WR
Jul 16, 2026
• Business Services
Play
Wring Group, an organisation in the United Kingdom, was listed as a victim of Play ransomware on July 16, 2026.
View details →
AG
Jul 16, 2026
• Business Services
Play
AG Scholtes, a manufacturing company in the Netherlands, was listed as a victim of Play ransomware on July 16, 2026.
View details →
AN
Jul 16, 2026
• Healthcare
Play
Andorra Life, a healthcare company in Andorra, was listed as a victim of Play ransomware on July 16, 2026.
View details →