Play ransomware group claims targeting German Orth Automobile

Summary

A ransomware.live monitoring post says the Play group claimed to target German manufacturer Orth Automobile. The post says the claim could not be independently confirmed.

Key points

• The record identifies Orth Automobile, a manufacturing company in Germany, as the claimed victim.
• The claim is attributed to the Play ransomware group and was recorded on September 30, 2026.
• The post explicitly says it cannot confirm the accuracy of the group’s claim.
• The monitoring record cites a group source at ipi4tiumgzjsym6pyuzrfqrtwskokxokqannmd6sa24shvr7x5kxdvqd[.]onion.

Threat Actors

Malware

Countries

Industries

Related Articles

• Sophos 2026 Active Adversary Report: Identity Failures Dominate Initial Accessgithub.com/jacobdjwilsonPlay
• Symantec Report Tracks Rising Encryptionless Extortion and New Ransomware Actorsgithub.com/jacobdjwilsonPlay
• ThreatDown 2026 Malware Report Tracks Ransomware Growth and AI-Assisted Attacksgithub.com/jacobdjwilsonPlay
• Arctic Wolf’s 2026 Threat Report Finds Remote Access Abuse Behind 65% of Non-BEC Casesgithub.com/jacobdjwilsonPlay
• Europol IOCTA 2026 Warns AI and Anonymised Infrastructure Are Scaling Cybercrimegithub.com/jacobdjwilsonPlay