THREAT OPS › Threat News › [play] Triumph Construction — ransomware leak-site post
[play] Triumph Construction — ransomware leak-site post
Ransomware group: play Victim (as posted on leak site): Triumph Construction Discovered: 2025-06-05 22:34:32.654155 Source: ransomwatch leak-site monitor Note: leak-site listings typically precede public disclosure.
Attributed threat actors
- PlayG1040
Original source: https://github.com/joshhighet/ransomwatch