Extortion indicators

Extortion indicator values

• Countdown or payment deadline
  6 incidents7 organizations
• Data sample published
  3 incidents3 organizations
• Data-theft extortion
  12 incidents13 organizations
• Direct victim contact
  4 incidents4 organizations
• Encryption-based extortion
  5 incidents6 organizations
• Full data publication
  3 incidents3 organizations
• Leak-site listing
  21 incidents30 organizations
• Negotiation portal or ransom chat
  1 incident1 organization
• No known extortion indicator
  40 incidents50 organizations
• Payment denied
  3 incidents10 organizations
• Payment reported
  3 incidents3 organizations
• Public leak threat
  13 incidents15 organizations
• Ransom demand
  8 incidents8 organizations
• Third-party pressure
  1 incident1 organization
• Unknown extortion indicators
  14 incidents15 organizations