The play ransomware group listed Kevin Bao Lenguyen on its data leak site on 2026-07-07. Domains named: www.kblaa.com Claim as published on the leak site: United States