Gulfstream Services Hit by PLAY Ransomware Attack, Exposing Sensitive Data Gulfstream Services, Inc., a Louisiana-based oil and energy equipment provider, suffered a ransomware attack on April 10, 2026, resulting in the exposure of sensitive personal and financial data. The breach was disclosed to the Texas Attorney General after the PLAY ransomware group claimed responsibility, first posting about the incident on the dark web on February 22, 2026. The attackers threatened to release stolen data within four days if demands were not met. The compromised information includes names, addresses, Social Security numbers, driver’s license and government-issued ID numbers, credit/debit card details, medical records, health insurance data, dates of birth, and financial account numbers. At least 250 individuals in Texas have been confirmed as affected so far. Gulfstream Services, founded in 1978, specializes in rental tools and equipment for the oil and gas industry, supporting operations from exploration to decommissioning. The breach has prompted legal investigations, with law firm Shamis & Gentile P.A. reviewing potential compensation claims for impacted individuals.