Ransomware victim disclosure
← All victimsPearson Ford
Claimed by Play · listed 3 hours ago
Status timeline
- Listed
Jun 7, 2026
Current state: Listed for ransom
At a glance
- Group
- Play
- Status
- Listed for ransom
- Listed on leak site
- Jun 7, 2026
About the victim
AI dossier — public-source company profilePearson Ford is an automotive dealership. No additional public information is available to confirm scale, location, or operational details.
- Industry
- Automotive Retail
Attack summary
Severity: low — Listing only with no proof files, no data inventory disclosed, and no operational impact stated. Insufficient evidence of actual compromise or data exfiltration.Play ransomware group lists Pearson Ford on their leak site with a publication date of 2026-06-08. No specific claims about encryption, exfiltration, or data types are stated in the available post excerpt.
The leak post
captured from the group's site| Play ransomware HAS NEVER PROVIDED AND DOES NOT PROVIDE THE RaaS, read the FAQ page.WE NEVER WRITES FIRST, IF SOMEONE WRITES TO YOU, THEY ARE SCAMMERS.If we have not responded to you by email within 12 hours, please leave your contact information on the website in the contact tab. | | --- | | Pearson Ford👁️ views: 205added: 2026-06-06publication date: 2026-06-08 | Corley MFG👁️ views: 592added: 2026-06-04publication date: 2026-06-08 | The Chapel👁️ views: 625added: 2026-06-04publication date: 2026-06-08 | | Dallis Law Firm👁️ views: 592added: 2026-06-04publication date: 2026-06-08 | Urschel Laboratories👁️ views: 623added: 2026-06-04publication date: 2026-06-08 | Hightower Communications👁️ views: 1356 | | Digitall Graphics👁️ views: 1369 | De Waard Transport👁️ views: 2464added: 2026-05-25 | MyPillow👁️ views: 2516added: 2026-05-25 | | Legend Networking & Telecom👁️ views: 2466added: 2026-05-25 | Round Hill Country Club👁️ views: 2464added: 2026-05-25 | NL Fisher👁️ views: 2559added: 2026-05-25 |
Screenshot of the leak post

Sources
Source
Indexed 3 hours agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.
