Ransomware Group: PLAY

VICTIM NAME: Fastighetsservice AB

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the PLAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with Fastighetsservice AB, discovered on February 11, 2025, indicates that the company’s sensitive information has been compromised. The victim operates within the business services sector in Sweden, which raises concerns regarding the potential impact of the leak on their operations and clients. While the compromise date is not explicitly mentioned, the discovery of the leak coincides with the active date of the post. The page contains various elements suggesting a considerable amount of data may have been leaked.

The published leak showcases a screenshot of the sensitive information, although specific contents have not been detailed to maintain confidentiality. Notably, the page is linked to the notorious ransomware group known as “Play,” which is recognized for its aggressive tactics and data exfiltration methods. The presence of downloadable links suggests that additional data might be available to those accessing the site, emphasizing the need for vigilance within the affected sector. As Fastighetsservice AB operates in Sweden, the incident raises significant implications for businesses focusing on client services amid escalating cyber threats.