Extortion indicators

Extortion indicator values

• Countdown or payment deadline
  38 incidents48 organizations
• Data sample published
  39 incidents48 organizations
• Data-theft extortion
  39 incidents46 organizations
• Demand escalation
  1 incident1 organization
• Direct victim contact
  25 incidents31 organizations
• Encryption-based extortion
  23 incidents25 organizations
• Full data publication
  10 incidents11 organizations
• Harassment or coercion
  1 incident1 organization
• Leak-site listing
  161 incidents209 organizations
• Negotiation portal or ransom chat
  4 incidents5 organizations
• No known extortion indicator
  102 incidents134 organizations
• Operational disruption threat
  2 incidents2 organizations
• Payment denied
  30 incidents37 organizations
• Payment instructions provided
  3 incidents3 organizations
• Payment reported
  8 incidents13 organizations
• Public leak threat
  49 incidents59 organizations
• Ransom demand
  67 incidents73 organizations
• Third-party pressure
  3 incidents3 organizations
• Unknown extortion indicators
  168 incidents266 organizations