Threat Actor
Play ransomware group
- First Reported
- Mar 3, 2026
- Latest Reported
- Apr 11, 2026
Reported Context (2)
- A June 2025 joint advisory from CISA, the FBI, and the Australian Cyber Security Centre said the group had exploited about 900 entities as of May 2025. Acronis Telemetry Finds Immutable Backups Cover 1.4% of Backup Storage
- Claims to have breached multiple organizations in the United States and Germany and threatens to publish allegedly compromised data. These are group claims; the article does not independently confirm the breaches or data theft. Play Ransomware Claims Cabka, WCC and Seven Other Organizations as Victims
Malware (1)
Vendors (2)
Products (2)
Industries (7)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.