Saddlers Court MFG listed on Play ransomware leak site

• Ransomware group: Play
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: October 13, 2026

The Play ransomware group has listed Saddlers Court MFG on its dedicated leak site, claiming to have successfully exfiltrated various types of corporate and personal data from the organization. This announcement, made on October 13, 2026, marks a significant escalation in the threat posed to the manufacturing firm, as the group threatens to publish the stolen information if their demands are not met.

The details of the claim

According to the announcement posted by the Play group, the threat actors gained unauthorized access to the private and confidential information of Saddlers Court MFG. The group's listing indicates that a specific timeframe has been established for the potential publication of these files, creating a sense of urgency for the targeted organization. This type of public pressure is a hallmark of modern ransomware operations, where the threat of data exposure is used as a primary lever for extortion.

The Play group is a known cybercriminal entity that has been active since 2022. They are recognized for employing double extortion tactics, a method where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. This dual-layered approach increases the pressure on victims, as the threat of a data leak remains even if the organization can restore its systems from backups.

The alleged stolen data

The announcement made by the Play group claims that a wide range of sensitive information has been compromised. The group asserts that the exfiltrated data includes various internal documents and highly sensitive personal information. The specific categories of data allegedly stolen include:

• Client documents
• Budget data
• Payroll information
• IDs
• Tax records
• Financial information

While the group has made these claims, the exact volume of the data and the specific number of files involved have not been disclosed in the leak site announcement.

About Saddlers Court MFG

Saddlers Court MFG is a manufacturing company based in the West Midlands, United Kingdom. The organization specializes in a variety of industrial processes and product types, including the production of mild steel products, CNC machining, turning, and metal fabrication. The nature of their business involves specialized manufacturing services that serve various industrial needs.

Analysis and potential implications

The claims made by the Play group suggest a high level of sensitivity regarding the stolen information. The potential exposure of payroll data, tax records, and identification documents poses significant secondary risks to the organization's employees and customers. Such data can be exploited for identity theft or used to launch highly targeted phishing attacks against individuals associated with the company.

Furthermore, the sensitivity of the claimed data could have a profound impact on the organization's operational continuity and its overall reputation. For organizations facing such threats, maintaining robust security postures is critical. This typically involves implementing multi-factor authentication, maintaining offline backups, and conducting regular employee training to recognize social engineering attempts. Additionally, monitoring for unusual data exfiltration patterns can help in detecting such breaches earlier.

The group's operational style is often described as closed, which can make it difficult for security researchers and the affected organization to fully determine the true scope of the breach or the exact methods used to gain access. While the group has identified the organization, the complexity of their operations often leaves many details regarding the intrusion unknown to the public.