Ransomware Group: PLAY

VICTIM NAME: Waller

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the PLAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page pertains to an incident involving a victim known as “Waller,” based in the United States. The data breach was discovered on April 14, 2025, and the attack was also recorded on the same day at approximately 9:17 pm. The page includes a screenshot of internal digital content, providing a visual overview of the compromised information. No specific attack details or industries associated with the victim are provided, but the leak involves sensitive data belonging to the entity identified as Waller.

Interestingly, the page features a link to an underground claim portal, suggesting the data was posted by the threat actor group “play.” This link points to a dark web address where further details or confirmation of the breach might be available. The leak’s content appears to be part of a broader ransomware campaign, although no explicit data files or additional malicious activities are listed. The incident highlights the ongoing threat landscape, emphasizing the importance of cybersecurity measures to prevent such intrusions and safeguard digital assets.