Play Ransomware Group Claims Tax MT as a Victim

Summary
A ransomware.live monitoring post attributes a claim targeting Tax MT to the Play group. The post says files were encrypted and operations disrupted, but states the information comes from the group’s public claim and is unconfirmed.
Key points
- The post identifies Tax MT as the claimed victim and Play as the ransomware actor.
- It says files were encrypted and operations disrupted, but these details are attributed to the group’s public claim and are unconfirmed.
- The claim is linked to a Play leak-site post and is attributed to ransomware.live monitoring.
- The record gives discovery and publication timestamps of July 21, 2026.
- The post says it cannot confirm the claim’s accuracy and invites an official statement from the affected organization.
Article Details
- Victim
- Tax MT
- Encryption Status
- Unverified; the article reports encryption as part of the Play claim but says it cannot confirm the information.
- Leak Status
- The article reports a Play ransomware claim; publication of victim data is not disclosed.
