Direct victim contact
The actor directly contacted the victim through a ransom note, email, chat portal, telephone call, messaging platform, or other communication channel.
Connected registry data
These connections are derived from the public incidents and organizations in this page’s scope.
Locations
60 valuesIncident impacts and related organization locations
- Anderson, South Carolina
- Batesville, Mississippi
- Bay St. Louis, Mississippi
- Biloxi, Mississippi
- Calais, Maine
- Canton, Mississippi
- Caribou, Maine
- Central, South Carolina
- Chanhassen, Minnesota
- Charlotte Amalie, U.S. Virgin Islands
- Cheyenne and Arapaho Oklahoma Tribal Statistical Area, Oklahoma
- Clemson, South Carolina
- Concho, Oklahoma
- Coweta, Oklahoma
- Delano Public School District, Minnesota
- Delano, Minnesota
- Easley, South Carolina
- Ecru, Mississippi
- Ellsworth, Maine
- Flowood, Mississippi
- Fort Fairfield, Maine
- Fort Kent, Maine
- Frederiksted, U.S. Virgin Islands
- Grenada, Mississippi
- Gulfport, Mississippi
- Hartwell, Georgia
- Hattiesburg, Mississippi
- Honea Path, South Carolina
- Houlton, Maine
- Irving, Texas
- Iuka, Mississippi
- Iva, South Carolina
- Jackson, Mississippi
- Lexington, Mississippi
- Liberty, South Carolina
- Los Angeles, California
- Louisville, Mississippi
- Machias, Maine
- Madawaska, Maine
- Madison, Mississippi
- Marshfield, Maine
- McComb, Mississippi
- Meridian, Mississippi
- Oxford, Mississippi
- Pendleton, South Carolina
- Pickens, South Carolina
- Piedmont, South Carolina
- Presque Isle, Maine
- Ridgeland, Mississippi
- Salt Lake City, Utah
- Suisun City, California
- Tulare City School District, California
- Tulare, California
- Tupelo, Mississippi
- U.S. Virgin Islands
- Vaiden, Mississippi
- Vicksburg, Mississippi
- West, Mississippi
- Williamston, South Carolina
- Winona, Mississippi
Operational impacts
34 valuesService effects recorded on related incidents
- Alternate service channel required
- Application unavailable
- Cloud service disruption
- Complete service outage
- Customer or public access restricted
- Degraded service
- Dispatch disruption
- Downstream organization impact
- Educational operations disrupted
- Email disruption
- Emergency communications disruption
- Event or activity cancellation
- Facility closure
- Government services disrupted
- Healthcare operations disrupted
- Intermittent service disruption
- Internal systems unavailable
- Internet access disruption
- Manual workaround required
- Network outage
- Online portal unavailable
- Partial service outage
- Payment processing disruption
- Phone service disruption
- Public safety operations disrupted
- Records access disruption
- Records processing disruption
- Scheduling disruption
- Service delay
- Staff sent home or placed on leave
- Staff unable to work normally
- Third-party service disruption
- Transaction processing disruption
- Website unavailable
Extortion indicators
12 valuesExtortion evidence recorded on related incidents
Data impacts
9 valuesAttack mechanisms
8 valuesMechanisms recorded on related incidents
Threat groups in related incidents
7 valuesDerived through public incident claims
Ransomware confidence
5 valuesRansomware assessment of related incidents
Incident status
3 valuesCurrent status of related incidents
Attribution confidence
3 valuesDD-CIT assessments
2 valuesCyber transparency
2 valuesCyber-transparency classifications of related incidents
Threat actor types
1 valueClassifications of related threat groups
Disruption transparency
1 valueDisruption-transparency classifications of related incidents
Incident confidence
1 valueAssessment confidence of related incidents
Cyber assessment
1 valueCurrent assessment of whether incidents are cyber-related