The play ransomware group listed Thern on its data leak site on 2025-07-31. Country: US Sector: Manufacturing Domains named: www.thern.com Claim as published on the leak site: United States