Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible Figgins Family Wine Estates data breach. According to dark web monitoring sources, a hacker group calling itself play claimed responsibility for a cyberattack on Figgins Family Wine Estates in a post first observed in August 2026, alleging it had gained access to internal company systems. As of this writing, Figgins Family Wine Estates has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About Figgins Family Wine Estates
Figgins Family Wine Estates (FFWE) is a privately held beverage manufacturing company based in Walla Walla, Washington, founded in 1977. It operates a collection of wine brands including Leonetti Cellar, the FIGGINS single-vineyard estate label, and Toil Oregon, a Willamette Valley Pinot Noir label. The company employs between 11 and 50 people, operates vineyards across the Walla Walla and Willamette Valleys, and sells estate-grown wines while offering by-appointment tasting experiences. Because this incident is based solely on an unverified attacker-side claim, the specific types of data that may have been involved have not been identified.
What Happened?
On August 31st, 2026, Ransomware.live reported that the Play ransomware group listed Figgins Family Wine Estates on its dark web leak site. RedPacket Security also reported the listing and noted that it should be treated as an allegation: the post contained no narrative description of the intrusion, no stated ransom demand, no reported volume of stolen data, no screenshots, and no downloadable files. RedPacket Security further warned that Play listings have in the past included unverified or fabricated claims. No public confirmation from Figgins Family Wine Estates or any regulator has been found, and no consumer notification has been identified. No independent corroborating source was found for this incident.
The Play ransomware group, also known as PlayCrypt, has been active since mid-2022 and employs a double-extortion model, meaning it claims to exfiltrate data before encrypting victim systems. The FBI had identified approximately 900 entities allegedly exploited by the group as of May 2025, and CISA issued a joint advisory on Play ransomware (AA23-352A) in December 2023. All attacker-side claims regarding this listing should be understood as allegations only and have not been confirmed by FFWE or any regulatory authority.
Key Facts at a Glance
- Company or Organization: Figgins Family Wine Estates
- Industry: Beverage Manufacturing / Wine and Spirits
- Location: Walla Walla, Washington, United States
- Incident type: Ransomware leak-site allegation (Play group); unverified dark web claim
- Date claim first observed: August 31st, 2026
- Source: Ransomware.live – Figgins Family Wine Estates; RedPacket Security – [PLAY] Ransomware Victim: Figgins Family Wine Estates; CISA – Play Ransomware Advisory AA23-352A
What Should You Do?
Because this incident has not been confirmed by Figgins Family Wine Estates, the types of data that may have been involved are unknown. Even so, it is a good idea to stay alert. You can place a free fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Review your credit reports at AnnualCreditReport.com and watch your financial accounts closely for any suspicious activity. If you receive a notification from Figgins Family Wine Estates offering identity theft protection services, enroll promptly and note any enrollment deadline. If you believe your information has been misused, visit IdentityTheft.gov for step-by-step guidance from the Federal Trade Commission.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
