Index live· 822 files indexed
ForensicPost

Search the index

7 results
Try
Results for “Play”Newest first
26-0918b
File

Lemonade’s Quote Tool Pre-Filled 190,644 Licence Numbers; the $10.5 Million Settlement Is Final

The form looked the number up and displayed it, so you were in the breach the moment someone typed your name. Fourteen years after the first file of its kind.

UnattributedQuote tool pre-fill abuseInsuranceExposure
Sev 3TargetLemonade quote-form visitorsActorUnattributedUSA
25-1231
File

A Fragmented Extortion Ecosystem Changes What Paying a Ransom Buys

The case for paying depended on a repeat player with a reputation to protect. Seventy-three new entrants in a year removes exactly that.

MultipleVariousMultipleAnalysis
Sev 4TargetExtortion negotiationActorMultiple
25-1109
File

Qilin Led Telecom Ransomware Activity in 2025, Ahead of Akira and Play

An ecosystem-wide long tail alongside sector concentration. Both are true, and it complicates the corpus’s own argument.

QilinRansomware-as-a-serviceTelecomActors
Sev 4TargetTelecommunications sectorActorQilin
25-0522
File

A Utility That Was Pre-Positioned in Briefed the People Who Would Have to Respond

Every playbook assumes an event. Pre-positioning has none — the adversary is deliberately behaving like an administrator.

Volt TyphoonUtilitiesUtilities
Sev 4TargetUS utilityActorVolt TyphoonUSA
25-0402
File

Akira, PLAY and RansomHub Absorbed the Disrupted Leader's Affiliates

In a lawful market, removing the dominant supplier reduces volume because capacity is expensive to replace. Here the capacity is software.

MultipleRansomware-as-a-serviceMultipleAnalysis
Sev 4TargetRansomware ecosystemActorMultiple
23-0614
File

Play Published 65,000 Swiss Federal Documents Taken From Contractor Xplain

The federal files were a twentieth of the dump. The rest belonged to everyone else the supplier served.

PlayGovernmentPublic sector
Sev 5TargetXplain / Swiss Federal AdministrationActorPlaySwitzerland
22-1202
File

The Hosted Email Service Did Not Come Back

The stopgap became the destination. Hosted Exchange was retired rather than restored.

PlayCVE-2022-41080 — zero-dayTechnologyAvailability
Sev 4TargetRackspaceActorPlayUSA
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging