Ransomware.live listed Hurley, associated with hurleyco.net, as a reported U.S. ransomware victim on September 21, 2026. The listing identified the group as Play and gave September 21, 2026, as the attack date. No company statement, regulator filing, or official breach notification was identified in the available research.
The listing did not provide an affected-individual count or identify exposed data. Whether Social Security numbers, medical information, financial information, or other personal data were involved remains unknown. No consumer notification date, regulatory notification date, or confirmed litigation was identified.