Ransomware Group: PLAY

VICTIM NAME: Baltimore Country Club

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the PLAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with Baltimore Country Club, a victim in the hospitality and tourism industry, indicates that sensitive data may have been compromised. The incident was publicly discovered on February 11, 2025, suggesting potential exposure of critical information. Although the specific details regarding the nature of the data leak are absent, the mention of a ransomware group known as “play” implies that the data has likely been targeted for extortion. The victim’s website is accessible, and the leak page features a screenshot that portrays elements of the internal environment of the club.

Based in the United States, Baltimore Country Club falls within an industry that commonly oversees various operational data and guest information. With the potential for a breach in this sector, there are serious implications for personal and customer information security. The content on the leak page does not specify the types of leaked information, nor does it reveal download links, but the notoriety of such hackers suggests a notable level of risk. Stakeholders and patrons of the club should remain vigilant in response to this situation.