Extortion group

play

play is an extortion group that publishes the names of organisations it says it has attacked. This tracker has recorded 2 such claims, none of which has been independently confirmed. Counts below describe what the group has claimed, not what has been verified.

Victims named
2
Assessed motivation
Financial gain
First seen
2026-09-09
Most recent
2026-09-09
Basis
Claimed by the group

Everything counted on this page is what play has claimed on its own leak site. Naming an organisation costs the group nothing and proves nothing, and most of those named have never confirmed an incident. The volume and the dates are facts about the group’s postings, not about breaches.

Incidents recorded here

A further 2 organisations have been named by this group without confirming anything. Those are not listed here. They are in the incident tracker with the caveat attached.