Tyree Oil Hit by PLAY Ransomware Attack, Exposing Sensitive Customer and Employee Data Tyree Oil, a family-owned petroleum supplier based in Eugene, Oregon, suffered a ransomware attack in July 2025, with the PLAY ransomware group claiming responsibility. The attackers threatened to publish stolen data, alleging access to confidential records, including client documents, payroll, accounting, tax information, and financial data. The breach was officially reported to the Massachusetts Attorney General on March 7, 2026, revealing that sensitive personal information such as names, Social Security numbers, credit/debit card details, driver’s licenses, financial account numbers, and health insurance data may have been exposed. At least three Massachusetts residents were confirmed affected, though the impact could extend across Oregon, Southwest Washington, and the broader Pacific Northwest. Tyree Oil, founded in 1988, serves commercial and retail customers with bulk fuel, lubricants, heating oil, and eco-friendly alternatives like biodiesel and E-85 ethanol. The incident highlights the growing risk of ransomware attacks targeting mid-sized businesses, with potential legal repercussions for affected individuals.