Play ransomware claims Red Star Oil

Published September 8, 2026

Ransomware.live records a claim by the Play ransomware group naming Red Star Oil.

Report priority
Critical
Named organization
Red Star Oil
Group
Play

What to do

Watch for an official notice from Red Star Oil if you have a relationship with it. The leak-site listing alone does not confirm that your information was involved.

Claim from Play

The Play ransomware group has listed Red Star Oil on its data-leak site. Victim is in the Energy & Utilities sector. Based in RS.