The Play ransomware group claims to have breached ADC Aerospace, a United States-based manufacturer specializing in highly engineered components for the aerospace, defense, and medical sectors. The cybercriminal group has listed the company on their dark web leak site, threatening to publish allegedly stolen data if their demands are not met by November 29, 2025.
ADC Aerospace is known for its precision manufacturing capabilities, including die casting and CNC machining, serving major clients in the aviation and defense industries. The listing indicates that the group added the victim to their extortion portal on November 26, 2025.
According to the actor, the compromised data includes a significant amount of sensitive corporate and personal information. The allegedly compromised data includes:
-
Private and personal confidential data
-
Client documents
-
Budget and financial information
-
Payroll records
-
IDs and tax documents
-
Finance information
