DysruptionHub registry workspace
Direct victim contact
Definition
The actor directly contacted the victim through a ransom note, email, chat portal, telephone call, messaging platform, or other communication channel.
Connected registry data
These connections are derived from the public incidents and organizations in this page’s scope.
Operational impacts
15 valuesService effects recorded on related incidents
- Alternate service channel required
- Customer or public access restricted
- Event or activity cancellation
- Facility closure
- Healthcare operations disrupted
- Internet access disruption
- Manual workaround required
- Network outage
- Online portal unavailable
- Phone service disruption
- Records access disruption
- Records processing disruption
- Scheduling disruption
- Service delay
- Staff unable to work normally
Locations
12 valuesIncident impacts and related organization locations
Extortion indicators
6 valuesExtortion evidence recorded on related incidents
Attack mechanisms
3 valuesMechanisms recorded on related incidents
Data impacts
3 valuesData effects recorded on related incidents
Threat groups in related incidents
1 valueDerived through public incident claims
Threat actor types
1 valueClassifications of related threat groups
DD-CIT classifications
1 valueClassifications of related incidents
Incident status
1 valueCurrent status of related incidents
Incident confidence
1 valueAssessment confidence of related incidents
Ransomware confidence
1 valueRansomware assessment of related incidents
Attribution confidence
1 valueActor attribution assessment