PLAY ransomware hits Argentina’s Judiciary of Córdoba

On Saturday 13th of August 2022, Argentina’s Judiciary of Córdoba experienced a ransomware attack that resulted in them having to shut down its IT systems. The shutdown also resulted in the use of pen and paper for submitting official documents.

Argentina’s Judiciary of Córdoba has confirmed they were hit by ransomware and have engaged with Microsoft, Cisco, Trend Micro, and local specialists to investigate the attack. While the Judiciary has not disclosed details of the attack, journalist Luis Ernest Zegarra revealed that the ransomware had appended the extension “.Play” to encrypted files. There is no data leak associated with the ransomware gang or any indication that data is stolen during attacks yet.