Threat actor tracker 1,320 incidents tracked

Play — every breach we're tracking

Running log of incidents attributed to or claimed by Play in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked1,320

Latest activitySeptember 30, 2026

TypeRansomware / extortion

Groups like Play steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 1,320 incidents we've attributed to Play.

high September 30, 2026

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan

15 seconds · 13.1B+ records checked · no account, no card

W Choose your protection level COMPARE PLANS →

The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.

Tracked incidents

Airtech Mechanical Services Listed by Play Ransomware Group

Titus Listed by Play Ransomware Group

Orth Automobile Listed by Play Ransomware Group

Ever Ready First Aid Listed by Play Ransomware Group

Starr Whitehouse Landscape Architects Listed by Play Ransomware Group

Metallco Listed by Play Ransomware Group

Hurley Listed by Play Ransomware Group

Vista Plastic Solutions Listed by Play Ransomware Group

Inglewood Golf Listed by Play Ransomware Group

Barrett Mahony Consulting Engineers Listed by Play Ransomware Group

Sys-kool Listed by Play Ransomware Group

Grunthal Welding & Supplies Listed by Play Ransomware Group

GT Distributors Listed by Play Ransomware Group

Red Star Oil Listed by Play Ransomware Group

Figgins Family Wine Estates Listed by Play Ransomware Group

Meteor Group Listed by Play Ransomware Group

MEQ Listed by Play Ransomware Group

KRC Machine Tool Solutions Listed by Play Ransomware Group

Be Media Listed by Play Ransomware Group

Latoplast Listed by Play Ransomware Group

Coltrane Systems Listed by Play Ransomware Group

Bridgeport Capital Services Listed by Play Ransomware Group

Woodhaven Association Listed by Play Ransomware Group

Sam Pack Auto Group Listed by Play Ransomware Group

MIE Solutions Listed by Play Ransomware Group

Rilpa Enterprises Listed by Play Ransomware Group

Marconi Industrial Services Listed by Play Ransomware Group

GCATS Investments Listed by Play Ransomware Group

Platinum Group Listed by Play Ransomware Group

Signature Services Listed by Play Ransomware Group

First Tek Listed by Play Ransomware Group

Preferred Financial Group Listed by Play Ransomware Group

Sigma Plastics Group Listed by Play Ransomware Group

The Butcher Brothers Listed by Play Ransomware Group

The Butcher Brothers Listed by Play Ransomware Group

Cambridge Management Listed by Play Ransomware Group

The DeBruler Listed by Play Ransomware Group

Record Go Alquiler Listed by Play Ransomware Group

Restaurant Depot Listed by Play Ransomware Group

Kreysler & Associates Listed by Play Ransomware Group

Tax MT Listed by Play Ransomware Group

Andorra Life Listed by Play Ransomware Group

Wring Group Listed by Play Ransomware Group

AG Scholtes Listed by Play Ransomware Group

Boston Electric and Telephone Listed by Play Ransomware Group

Svensk Direktreklam Listed by Play Ransomware Group

Kevin Bao Lenguyen Listed by Play Ransomware Group

Preneed Funeral Programs Listed by Play Ransomware Group

United Infrastructure Listed by Play Ransomware Group

Locati Architects Listed by Play Ransomware Group

Silvestri & Associates Insurance Listed by Play Ransomware Group

Silvestri & Associates Insurance Hit by Play Ransomware

Western Construction Listed by Play Ransomware Group

Kuhnline Listed by Play Ransomware Group

J&J Gaming Listed by Play Ransomware Group

Benchmark Industrial Supply Listed by Play Ransomware Group

Greg Crosslin Listed by Play Ransomware Group

Integrated Technologies Listed by Play Ransomware Group

eurOptimum Listed by Play Ransomware Group

Rainbow Distributors USA Listed by Play Ransomware Group

Your email leaked. See who’s selling your address.