Ransomware Group: PLAY

VICTIM NAME: All Choice Rentals

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the PLAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to a company operating in the consumer services sector, based in Canada. The affected entity is identified as “All Choice Rentals.” The attack was publicly disclosed on July 3, 2025, at approximately 15:21 local time. Specific details regarding the nature of the data compromised have not been provided; however, the leak indicates a breach that may involve sensitive customer or operational information.

The page includes a link to a claim URL hosted on the dark web, which is typical of ransomware leaks aiming to verify victim data or provide a means for affected parties to claim the leak. Although no screenshots or explicit evidence of data exfiltration are included, the presence of such a leak suggests there may be data leaks or compromises involved. The leak appears associated with a hacking group identified as “play” and is linked to an attack date recorded as July 3, 2025. No additional information about the specific data stolen, the attack vector, or the extent of the breach is available from the provided data.