Andorra Life in Andorra was targeted by the ransomware threat actor “play,” which conducted an intrusion and encrypted or disrupted victim data to extort recovery. The attack impacted Andorra#Andorra
Incident Details
- Victim: Andorra Life
- Sector: Healthcare
- Country: AD
- Actor: play
- Source: http://j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion/topic.php?id=MkNR4jZleHdlYc
- Discovered: 2026-07-16T17:57:17.562972+00:00
- Published: 2026-07-16T17:57:01.881138+00:00
Information
- Andorra Life was targeted by the Play ransomware group in the United States.

Disclaimer: This post is based on public claims made by the ransomware group "play". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.