The ransomware claim involves Phoenix Lighting, a company based in the United States, which was targeted by the threat actor βplayβ originating from the United States. The attack resulted in significant data compromise and operational disruption in the US. #United States
Incident Details
- Victim: Phoenix Lighting
- Country: US
- Actor: play
- Source: http://k7kg3jqxang3wh7hnmaiokchk7qoebupfgoik6rha6mjpzwupwtj25yd.onion//topic.php?id=vMx4lwvF8X3hu8
- Discovered: 2025-08-04 18:49:35.909106
- Published: 2025-08-04 18:48:51.507344
Information
- Experienced a ransomware attack while operating in the United States.
- Attack attributed to the threat actor known as βplayβ.
- The incident impacted Phoenix Lighting, a company based in the US.

Disclaimer: This post is based on public claims made by the ransomware group "play". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.