The ransom note from the threat actor “play” targeted National Coatings in the United States, claiming to have encrypted the company’s critical data and demanding payment for the decryption key. This incident highlights increasing cybersecurity threats faced by organizations across the United States. #UnitedStates
Incident Details
- Victim: National Coatings
- Country:
- Actor: play
- Source: http://k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion/topic.php?id=QSN5XIN8yQwvO6
- Discovered: 2025-10-21 19:17:26.955197
- Published: 2025-10-21 19:16:44.092817
Information
- The organization was targeted by a ransomware attack.
- The incident was carried out by the actor known as “play”.
- The attack took place in the United States.
Disclaimer: This post is based on public claims made by the ransomware group "play". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.