Record Go Alquiler listed on play ransomware leak site

• Ransomware group: play
• Country: Spain
• Sector: Hospitality
• Announcement date: July 23, 2026

The Spanish-based car rental company Record Go Alquiler has been listed on the leak site of the play ransomware group. On July 23, 2026, the threat actor group published an announcement claiming to have compromised data belonging to the organization. This listing indicates that a countdown process has been initiated for the publication of the data.

The alleged data breach event

According to the announcement made by the play ransomware group, the group alleges that it has gained access to the private and confidential information of Record Go Alquiler. The group's claim suggests a significant breach of the organization's internal systems, allowing them to access sensitive files. While the group has posted the organization's name on their leak site, the specific details regarding the exact method of entry or the total volume of data stolen have not been provided in the announcement.

The presence of a countdown on the leak site is a common tactic used by ransomware groups to pressure victims into meeting ransom demands. This method is a core component of modern cyber extortion, where the threat of public data exposure is used as leverage. The group's claim asserts that they have successfully exfiltrated data that is highly sensitive to both the company's operations and its stakeholders.

The types of data involved

The listing specifies several categories of information that the play ransomware group claims to have stolen from the organization. The compromised data is said to include a variety of sensitive documents and records. Based on the group's claims, the affected information includes:

• Client documents
• Budget data
• Payroll information
• IDs
• Tax records
• Financial information

The breadth of the data mentioned in the claim suggests a wide-reaching impact on different departments within the organization, ranging from human resources and finance to customer service operations.

About Record Go Alquiler

Record Go is a car rental company based in Spain. The organization provides short-term vehicle rental services, specifically focusing on tourist areas and airports to facilitate travel for its customers.

Analysis and potential consequences

This alleged leak by the play group may increase the risk of identity theft and fraud for the organization's customers and employees. Because the group's use of double extortion tactics suggests that the leaked data could be utilized in secondary attacks or targeted phishing campaigns, the implications extend beyond the initial breach. Double extortion involves not only encrypting a victim's data but also threatening to release it publicly to maximize pressure.

As the organization operates in Spain, it may face data breach notification obligations under the European Union's General Data Protection Regulation (GDPR). A breach of this nature, involving financial and operational data, may lead to long-term reputational damage and legal sanctions. Information regarding this specific group remains limited.

Organizations operating in the hospitality and rental sectors often face similar risks due to the high volume of personal and financial data they process. To mitigate such risks, companies typically implement defensive measures such as multi-factor authentication, regular security audits, and robust encryption for sensitive data at rest and in transit. Furthermore, maintaining a comprehensive incident response plan is a critical step for any organization to manage the legal and reputational fallout of a potential data breach.