Argentina Hit by PLAY Group | Cyber Protection Operation Center News

Argentina's Judiciary of Córdoba has shut down its IT systems and online portal after suffering a ransomware attack, claimed by the new 'Play' ransomware operation.
The Judiciary confirmed that it engaged with Microsoft, Cisco, and other local specialists to investigate the attack.
It is unknown how Play breached the Judiciary's network, but a list of employee email addresses was leaked as part of the Lapsus$ breach of Globant in March. This may have allowed threat actors to conduct a phishing attack to steal credentials. There is no data leak associated with the ransomware gang or any indication that data is stolen during attacks.
The Active Protection in Acronis Cyber Protect detects and blocks ransomware, keeping your data safe from encryption or extortion.