Highmark Companies in the United States have reported a ransomware attack carried out by the threat actor play. The incident has resulted in significant data disruption, impacting operations within the country. #UnitedStates
Incident Details
- Victim: Highmark Companies
- Country: US
- Actor: play
- Source: http://mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion/index.php?page=1/topic.php?id=FHHE0D0V0HmRr
- Discovered: 2025-11-20 18:08:50.843463
- Published: 2025-11-20 18:08:10.349322
Information
- The victim is a prominent healthcare organization in the United States.
- The attack was executed using ransomware, disrupting the organizationβs operations.
- The actor responsible for the attack is identified as βPlay,β based in the United States.

Disclaimer: This post is based on public claims made by the ransomware group "play". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.