Ransomware Group: PLAY

VICTIM NAME: Carney Badley Spellman

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the PLAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page pertains to the law firm Carney Badley Spellman, located in the United States. The breach was discovered and publicly announced on May 16, 2025. The attackers, identified as part of a group known as “play,” claim to have compromised the victim’s systems. An image preview shows a screenshot associated with the incident, which may include internal data or technical information relevant to the breach. The group appears to have launched an information-stealing attack, aiming to extract sensitive data for malicious purposes.

The associated claim URL directs to an onion site, indicating that the attackers are utilizing the dark web for communication or data release. There is indication of data being potentially available for download or exposure, but specific details about the leaked content are not provided publicly. The leak page emphasizes the seriousness of the breach without revealing explicit or PII information. The breach appears to focus on illicit data extraction, with the attacker group promoting the leak on dark web channels. At this stage, no detailed list of compromised data or individual information is disclosed.