Executive Aviation reports a ransomware claim attributed to the threat actor ‘play’ based in the United States.
The incident disrupted operations and encrypted critical systems, with incident response and recovery efforts ongoing.
#UnitedStates
The incident disrupted operations and encrypted critical systems, with incident response and recovery efforts ongoing.
#UnitedStates
Incident Details
- Victim: Executive Aviation
- Sector: Transportation/Logistics
- Country:
- Actor: play
- Source: http://mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion/index.php?page=1/topic.php?id=UbiQY3El2hyhzj
- Discovered: 2026-03-15 19:42:24.526107
- Published: 2026-03-15 19:41:39.241106
Information
- Executive Aviation was targeted in a ransomware attack attributed to the Play group.
- The incident took place in the United States.
- No further details about impact, ransom demands, or remediation have been provided.
Disclaimer: This post is based on public claims made by the ransomware group "play". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.