Rackspace, a cloud computing company, was one of the high-profile victims of the Play ransomware gang. The attack involved the theft of sensitive documents from compromised systems, which were then used to pressure the company into paying ransom demands under the threat of publishing the stolen data on the gang's dark web leak site. The ransomware gang also used a custom VSS Copying Tool to steal files from shadow volume copies, making the attack more challenging to mitigate.

Rackspace Technology suffered from a ransomware attack after that they prevented thousands of customers from accessing their emails and related data, costing Rackspace Technology Inc. $10.8 million in costs. In order to "investigate and remediate, legal and other professional services, and supplemental staff resources that were deployed to provide support to customers," the San Antonio-based cloud computing company paid the associated expenses.

Some of Rackspace’s hosted Microsoft Exchange services were taken down by the company as a “security incident”. The company became aware of an issue impacting its Hosted Exchange environment and proactively powered down and disconnected the Hosted Exchange environment to prevent further spread. Rackspace had no idea when it will be able to restore its service to those impacted by the security incident. Rackspace has offered impacted customers free access to Microsoft Exchange Plan 1 licenses on Microsoft 365 for the duration of the incident and shared instructions on how to get that up and running.