The threat actor “play” has launched a ransomware attack against Combined Services HVAC in the United States, encrypting critical data and demanding a ransom for its release. The attack has disrupted operations and compromised sensitive information within the organization. #UnitedStates
Incident Details
- Victim: Combined Services HVAC
- Country: US
- Actor: play
- Source: http://mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion/index.php?page=1/topic.php?id=TWLK7ZPm3DRHEi
- Discovered: 2025-09-22 20:18:59.180886
- Published: 2025-09-22 20:18:19.931294
Information
- Victim experienced a ransomware attack.
- The incident occurred in the United States.
- The threat actor involved is identified as “play”.
Disclaimer: This post is based on public claims made by the ransomware group "play". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.