Incident Details
- Victim: Thomas Safran & Associates
- Country: US
- Actor: play
- Source: http://mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbkkknndqwae6byd.onion/index.php?page=1/topic.php?id=pky3LrkLkUWt5G
- Discovered: 2025-09-17 22:18:55.806410
- Published: 2025-09-17 22:18:14.799630
Information
- Thomas Safran & Associates experienced a ransomware attack.
- The incident occurred in the United States.
- The threat actor involved is referred to as βplayβ.

Disclaimer: This post is based on public claims made by the ransomware group "play". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.