Ransomware Group: PLAY

VICTIM NAME: Anchor Industries

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the PLAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to Anchor Industries, a manufacturing company based in the United States. The attack was discovered on May 30, 2025, and the breach was confirmed shortly afterward. The page includes a screenshot of internal documents or data, indicating that sensitive information may have been compromised. Although specific details about the nature of the data stolen are not provided, the leak suggests a significant security incident targeting the company’s operational infrastructure. The attackers claim to have obtained valuable data and have provided a link to their threat group’s claim page for further verification or negotiation.

The leak webpage emphasizes the seriousness of the breach, showcasing visuals that hint at possible internal information exposure. No explicit details about the contents have been disclosed publicly, but the presence of download links and evidence of data exfiltration imply that the attackers may release confidential company data if their demands are not met. The incident affects a manufacturing industry entity, and the attackers are identified as part of the “play” group, indicating a potentially organized ransomware operation. The website provides a copy of the breach claim and a link to the dark web, highlighting the ongoing threat posed by cybercriminal groups targeting industrial sectors.