Ransomware victim disclosure
← All victimsKivells
Claimed by Play · listed 13 days ago
Status timeline
- Listed
May 7, 2026
Current state: Listed for ransom
At a glance
- Group
- Play
- Status
- Listed for ransom
- Listed on leak site
- May 7, 2026
About the victim
AI dossier — public-source company profileKivells is a well-established firm of chartered surveyors, estate agents, and auctioneers based in Devon and Cornwall, England. The company is known for agricultural property sales, livestock markets, and rural professional services across the South West of England. It operates multiple offices serving farming and rural communities in the region.
- Industry
- Agricultural & Rural Property Auctioneering
Attack summary
Severity: low — The post is a listing only with no proof files, no stated data size, no ransom demand, and no explicit claim of exfiltration or encryption — only an announcement of the victim.The Play ransomware group has listed Kivells as a victim on their leak site. No specific claims about data exfiltration volume, encryption, or ransom demand are stated in the post.
The leak post
captured from the group's site| Play ransomware HAS NEVER PROVIDED AND DOES NOT PROVIDE THE RaaS, read the FAQ page.WE NEVER WRITES FIRST, IF SOMEONE WRITES TO YOU, THEY ARE SCAMMERS.we'll buy your access: 75tkvxemb6zpyk3fbl3mwm32jklc2sdjacb3kazrioamopbfn2w2z5qd.onionIf we have not responded to you by email within 12 hours, please leave your contact information on the website in the contact tab. | | --- | | EMA Engineering & Consulting👁️ views: 97added: 2026-05-07publication date: 2026-05-11 | Accessoires Outillage Ltee👁️ views: 61added: 2026-05-07publication date: 2026-05-11 | K & E Distributing👁️ views: 68added: 2026-05-07publication date: 2026-05-11 | | Sokolin👁️ views: 7058 | Barnes Solicitors LLP👁️ views: 6979 | Witt UK Group👁️ views: 7980 | | Valley Plating Inc👁️ views: 7995 | Dock Pros👁️ views: 7977 | Kivells👁️ views: 7944 | | Specflue👁️ views: 7933 | Weber Kracht & Chellew👁️ views: 7977 | Lucky Look👁️ views: 8078 |
Sources
Source
Indexed 13 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
