Extortion indicators

Extortion indicator values

• Countdown or payment deadline
  16 incidents18 organizations
• Data sample published
  11 incidents11 organizations
• Data-theft extortion
  25 incidents26 organizations
• Direct victim contact
  12 incidents12 organizations
• Encryption-based extortion
  13 incidents14 organizations
• Full data publication
  6 incidents6 organizations
• Leak-site listing
  57 incidents67 organizations
• Negotiation portal or ransom chat
  1 incident1 organization
• No known extortion indicator
  67 incidents82 organizations
• Payment denied
  8 incidents15 organizations
• Payment instructions provided
  1 incident1 organization
• Payment reported
  5 incidents5 organizations
• Public leak threat
  25 incidents28 organizations
• Ransom demand
  24 incidents24 organizations
• Third-party pressure
  1 incident1 organization
• Unknown extortion indicators
  26 incidents41 organizations