RANSOMWARE VICTIM⚠ DUPLICATE CLAIM
T a Solberg
www.tasolberg.com
play📍 NO (NO)📅 March 6, 2026
8
same group
Attack Intelligence
T a Solberg was compromised in a ransomware attack attributed to play in March 2026. The organization, operating in an undisclosed sector in NO, was added to the group's data leak site as part of an extortion campaign.
play operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
United States
Additional Details
Other Victims — play (8)
GCATS Investments
US · Financial Services
Aug 2026
Signature Services
Professional Services
Aug 2026
Platinum Group
SG · Manufacturing
Aug 2026
First Tek
TW · Technology
Aug 2026
Preferred Financial Group
US · Financial Services
Aug 2026
Sigma Plastics Group
US · Manufacturing
Aug 2026
Cambridge Management
US · Professional Services
Aug 2026
The Butcher Brothers
US · Retail & E-Commerce
Aug 2026
Quick Facts
CountryNO (NO)
Attack DateMar 6, 2026
Domainwww.tasolberg.com
Intel Sourceransomware.live
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.