Play Ransomware Claims Breach of Swedish Demolition Giant Brokk, Threatens Data Leak The Russia-linked Play ransomware operation has allegedly stolen and exposed a 4 GB dataset from Brokk, a leading Swedish manufacturer of remote-controlled demolition machinery. The group threatened to leak the full trove of stolen data if the company fails to meet its ransom demands. The compromised dataset reportedly includes sensitive internal documents, such as financial records, budgets, payroll information, employee IDs, tax details, and client files. While the legitimacy of Play’s claims remains unverified, security researchers at Cybernews warn that such a breach could inflict reputational damage on Brokk, along with long-term risks tied to exposed personally identifiable information (PII). Leaked employee data may lead to targeted scams and prolonged security and compliance challenges. Play ransomware, active for the past three years, has claimed over 1,100 victims to date, with recent targets including Jamco Aerospace and ADC Aerospace. The group’s latest alleged breach underscores the persistent threat posed by ransomware operations to industrial and corporate sectors.