THREAT OPS › Threat News › [play] Grunthal Welding & Supplies posted to leak site
[play] Grunthal Welding & Supplies posted to leak site
Ransomware group: play Victim: Grunthal Welding & Supplies Victim website: grunthalwelding.com Sector: Manufacturing Country: CA Discovered: 2026-09-10T19:05:21.063162+00:00 Leak-site post: http://ipi4tiumgzjsym6pyuzrfqrtwskokxokqannmd6sa24shvr7x5kxdvqd.onion/topic.php?id=JOeV4CADDG9te Description: Canada Note: leak-site listings typically precede public disclosure.
Attributed threat actors
- PlayG1040
Indicators of compromise
- grunthalwelding.comdomain
- http://ipi4tiumgzjsym6pyuzrfqrtwskokxokqannmd6sa24shvr7x5kxdvqd.onion/topic.php?id=JOeV4CADDG9teurl