The ransomware claim reports that PHA Body Systems in Germany was targeted by the threat actor “play” from South Korea, resulting in significant data encryption and operational disruption. This incident highlights the ongoing cyber threats posed by South Korean threat groups to organizations within Germany. #Germany
Incident Details
- Victim: PHA Body Systems
- Country: DE
- Actor: play
- Source: http://k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion/topic.php?id=S2NpGi6yalxcR
- Discovered: 2025-12-01 20:07:52.537864
- Published: 2025-12-01 20:07:15.348085
Information
- The victim is PHA Body Systems.
- Located in Germany.
- Ransomware attack carried out by a group referred to as ‘play.’
- Estimated involvement or activity linked to South Korea.
Disclaimer: This post is based on public claims made by the ransomware group "play". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.