RANSOMWARE VICTIMBUSINESS SERVICES
Tax MT
play📍 MT (MT)📅 July 21, 2026
8
same group
Attack Intelligence
Tax MT was compromised in a ransomware attack attributed to play in July 2026. The organization, operating in the Business Services sector in MT, was added to the group's data leak site as part of an extortion campaign.
play operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
United States
Additional Details
Other Victims — play (8)
Sigma Plastics Group
US · Manufacturing
Aug 2026
Cambridge Management
US · Professional Services
Aug 2026
The Butcher Brothers
US · Retail & E-Commerce
Aug 2026
Record Go Alquiler
AR · Hospitality
Jul 2026
Restaurant Depot
US · Retail & E-Commerce
Jul 2026
The DeBruler
MT · Not Found
Jul 2026
Kreysler & Associates
US · Business Services
Jul 2026
Andorra Life
AD · Healthcare
Jul 2026
Quick Facts
CountryMT (MT)
SectorBusiness Services
Attack DateJul 21, 2026
Intel Sourceransomware.live
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.