Direct victim contact
The actor directly contacted the victim through a ransom note, email, chat portal, telephone call, messaging platform, or other communication channel.
Connected registry data
These connections are derived from the public incidents and organizations in this page’s scope.
Locations
112 valuesIncident impacts and related organization locations
- Abilene, Texas
- Anderson, South Carolina
- Arkansas City water service area, Kansas
- Arkansas City, Kansas
- Augusta, Maine
- Batesville, Arkansas
- Batesville, Mississippi
- Bay St. Louis, Mississippi
- Benton County, Arkansas
- Bentonville, Arkansas
- Bernalillo, New Mexico
- Biloxi, Mississippi
- Box Elder County, Utah
- Bridgewater Township, New Jersey
- Brigham City, Utah
- Cadillac, Michigan
- Calais, Maine
- Canton, Mississippi
- Caribou, Maine
- Central, South Carolina
- Champaign, Illinois
- Chanhassen, Minnesota
- Charlotte Amalie, U.S. Virgin Islands
- Chesapeake, Virginia
- Cheyenne and Arapaho Oklahoma Tribal Statistical Area, Oklahoma
- Clemson, South Carolina
- Colfax, Washington
- Concho, Oklahoma
- Coweta, Oklahoma
- Cowley County, Kansas
- Dane County, Wisconsin
- Delano Public School District, Minnesota
- Delano, Minnesota
- Easley, South Carolina
- Ecru, Mississippi
- Ellsworth, Maine
- Farmington Hills, Michigan
- Flowood, Mississippi
- Fort Bend County, Texas
- Fort Fairfield, Maine
- Fort Kent, Maine
- Frederiksted, U.S. Virgin Islands
- Garfield, Washington
- Grenada, Mississippi
- Gulfport, Mississippi
- Hartwell, Georgia
- Hattiesburg, Mississippi
- Highland Park, Texas
- Honea Path, South Carolina
- Houlton, Maine
- Houston, Texas
- Irving, Texas
- Iuka, Mississippi
- Iva, South Carolina
- Jackson, Mississippi
- Jefferson County, Kentucky
- Jeffersontown, Kentucky
- Jerome Joint School District No. 261, Idaho
- Jerome, Idaho
- Kent County, Michigan
- Lexington, Mississippi
- Liberty, South Carolina
- Los Angeles, California
- Louisville, Kentucky
- Louisville, Mississippi
- Luna County, New Mexico
- Machias, Maine
- Madawaska, Maine
- Madison, Wisconsin
- Madison, Mississippi
- Marshfield, Maine
- McComb, Mississippi
- Meridian, Mississippi
- Middletown, Kentucky
- Missouri City, Texas
- Needville, Texas
- New York City, New York
- Northwest Arkansas Community College District, Arkansas
- Oakland Community Unit School District 5, Illinois
- Oakland, Illinois
- Oxford, Mississippi
- Pendleton, South Carolina
- Pickens, South Carolina
- Piedmont, South Carolina
- Presque Isle, Maine
- Richmond, Texas
- Richmond, Virginia
- Ridgeland, Mississippi
- Rockford Public Schools, Michigan
- Rockford, Michigan
- Ruston, Louisiana
- St. John, Washington
- Salt Lake City, Utah
- Searcy, Arkansas
- Silver City, New Mexico
- Springdale, Arkansas
- Sugar Land, Texas
- Suisun City, California
- Tekoa, Washington
- Tulare City School District, California
- Tulare, California
- Tupelo, Mississippi
- U.S. Virgin Islands
- University Park, Texas
- Urbana, Illinois
- Vaiden, Mississippi
- Vicksburg, Mississippi
- Washington County, Arkansas
- West, Mississippi
- Wexford County, Michigan
- Williamston, South Carolina
- Winona, Mississippi
Operational impacts
41 valuesService effects recorded on related incidents
- Alternate service channel required
- Application unavailable
- Authentication disruption
- Backlog created
- Cloud service disruption
- Complete service outage
- Customer or public access restricted
- Database unavailable
- Degraded service
- Dispatch disruption
- Downstream organization impact
- Educational operations disrupted
- Email disruption
- Emergency communications disruption
- Event or activity cancellation
- Facility closure
- Government services disrupted
- Healthcare operations disrupted
- Intermittent service disruption
- Internal systems unavailable
- Internet access disruption
- Manual workaround required
- Network outage
- No known operational impact
- Online portal unavailable
- Partial service outage
- Payment processing disruption
- Phone service disruption
- Public safety operations disrupted
- Records access disruption
- Records processing disruption
- Remote access disruption
- Safety risk or operational hazard
- Scheduling disruption
- Service delay
- Staff sent home or placed on leave
- Staff unable to work normally
- Third-party service disruption
- Transaction processing disruption
- Utility operations disrupted
- Website unavailable
Extortion indicators
14 valuesExtortion evidence recorded on related incidents
- Countdown or payment deadline
- Data sample published
- Data-theft extortion
- Encryption-based extortion
- Full data publication
- Leak-site listing
- Negotiation portal or ransom chat
- Operational disruption threat
- Payment denied
- Payment instructions provided
- Payment reported
- Public leak threat
- Ransom demand
- Third-party pressure
Threat groups in related incidents
13 valuesDerived through public incident claims
Data impacts
11 valuesAttack mechanisms
9 valuesMechanisms recorded on related incidents
Ransomware confidence
5 valuesRansomware assessment of related incidents
Attribution confidence
4 valuesActor attribution assessment
DD-CIT assessments
3 valuesCyber transparency
3 valuesCyber-transparency classifications of related incidents
Incident status
3 valuesCurrent status of related incidents
Disruption transparency
2 valuesDisruption-transparency classifications of related incidents
Threat actor types
1 valueClassifications of related threat groups
Incident confidence
1 valueAssessment confidence of related incidents
Cyber assessment
1 valueCurrent assessment of whether incidents are cyber-related