Miller Boskus Lack Architects listed on Play ransomware leak site

• Ransomware group: Play
• Country: United States
• Sector: Professional Services
• Announcement date: April 14, 2025

Play ransomware group targets Miller Boskus Lack Architects

The Play ransomware group has officially listed Miller Boskus Lack Architects on its dedicated leak site. In an announcement made on April 14, 2025, the threat actor group claimed to have conducted a cyberattack against the organization and has threatened to publish the stolen data if their demands are not met.

This listing serves as a public claim by the ransomware group, indicating that they have successfully compromised the target. Such actions are a common tactic used by modern ransomware operators to exert pressure on victims through public shaming and the threat of data exposure.

Details of the alleged attack and timeline

According to the announcement posted on the group's leak portal, the Play ransomware group has scheduled the publication of the organization's data for April 19, 2025. This timeline suggests a countdown mechanism often used by extortionists to increase psychological pressure on the victim organization.

While the group has made this claim, it is important to note that the specific nature or content of the allegedly leaked data remains unknown. The announcement provided by the group does not contain any specific information regarding the files involved. Furthermore, the screenshots associated with the listing do not provide any details concerning the file types, categories, or the volume of information that has been targeted in this alleged breach.

About Miller Boskus Lack Architects

Miller Boskus Lack Architects is a professional services firm based in Arkansas, United States. The firm specializes in a variety of architectural projects, including residential, commercial, and institutional developments. They are recognized for providing sustainable design and modern architectural solutions to their clients.

Risk assessment and implications for professional services

This alleged leak poses significant risks to the organization's operational processes and its commercial reputation. Because the specific content of the data has not been clarified, the possibility that sensitive employee or client information has been compromised cannot be overlooked. For an organization based in the United States, a confirmed data breach may trigger mandatory notification obligations under various state laws and federal regulations.

The mechanics of double extortion

The Play group is a known entity that has been active since 2022. They are recognized for employing double-extortion tactics. In a double-extortion scenario, attackers do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data before the encryption phase. This allows them to threaten the victim with the public release of confidential information, providing a secondary layer of leverage to demand ransom payments.

Organizations targeted by such groups are often susceptible to secondary attacks or highly targeted phishing attempts following the initial breach. The public nature of these leaks can lead to further exploitation by other threat actors interested in the stolen information.

Defensive considerations for the sector

For organizations operating in the professional services sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive strategies include:

• Implementing strict access controls and multi-factor authentication to prevent unauthorized entry.
• Maintaining regular, offline backups to ensure operational continuity in the event of encryption.
• Conducting regular employee training to recognize and defend against phishing attempts.
• Monitoring for unusual data exfiltration patterns that might indicate an ongoing breach.

As public information regarding the Play group remains limited, organizations are advised to remain vigilant against the potential for follow-on attacks and to prepare for regulatory compliance requirements should a breach be confirmed.