Ransomware Group: PLAY

VICTIM NAME: NPD Products

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the PLAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to a company identified as NPD Products. The incident was publicly disclosed on June 14, 2025, indicating a recent breach. The compromised domain is associated with a business sector located in Canada, although specific activity details remain unspecified. The discovery timestamp confirms the breach was detected shortly after the attack date. The leak includes visual evidence such as a screenshot, which appears to depict internal documents or data related to the company, but no explicit sensitive details are disclosed in the summary. The leak provides a claim URL hosted on an .onion site, allowing access to additional information or data related to the incident, though direct download links or data dumps are not mentioned explicitly. The breach seems to be connected to a group named “play,” and the attack type involves data theft or cyber intrusion. Overall, the leak suggests an aggressive effort by threat actors to release confidential information from NPD Products, highlighting concerns regarding data security for organizations within the region. No personally identifiable information or specific technical data has been publicly revealed.