MBTW Group Inc. Faces Cyber Threat from Play Ransomware Group

Incident Date:

April 11, 2024

World map



MBTW Group Inc. Faces Cyber Threat from Play Ransomware Group


MBTW Group Inc.




East York, Canada

, Canada

First Reported

April 11, 2024

Ransomware Attack on MBTW Group Inc.

Company Profile

MBTW Group Inc., a multi-disciplinary landscape architecture, urban design, and community planning firm located in Midtown Toronto, has been targeted in a ransomware attack by the Play Ransomware group. The company, established in 1975, boasts an award-winning reputation for providing design consulting services to international clients in both private and public sectors. It has a team of 71 employees.

Industry Standing

The firm stands out in the Real Estate sector for its extensive experience and expertise in landscape architecture, urban design, and community planning. With a history dating back to 1975, MBTW has established a strong reputation for delivering innovative and sustainable design solutions to a diverse range of clients.


As a mid-sized company operating in the Real Estate sector, MBTW Group Inc. may be targeted by threat actors like the Play Ransomware group due to potential vulnerabilities in their cybersecurity defenses. Threat actors often exploit weaknesses in systems, such as exposed RDP servers and unpatched software, to gain access and deploy ransomware attacks. It is crucial for organizations like MBTW Group Inc. to prioritize cybersecurity measures to prevent these attacks from malicious entities.


MBTW Group Inc. Website

RocketReach - MBTW Group Inc. Employee Information

CyberInt - Play Ransomware Group Overview

SocRadar - Play Ransomware Dark Web Profile

IC3 - Ransomware Attack Information

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.