DysruptionHub registry workspace
Encryption-based extortion
Definition
The extortion activity involved unauthorized encryption of systems or data, with restoration or decryption conditioned on payment.
Connected registry data
These connections are derived from the public incidents and organizations in this page’s scope.
Locations
56 valuesIncident impacts and related organization locations
- Anderson, South Carolina
- Batesville, Mississippi
- Bay St. Louis, Mississippi
- Beaver County, Pennsylvania
- Beaver, Pennsylvania
- Biloxi, Mississippi
- Canton, Mississippi
- Center Township, Pennsylvania
- Central, South Carolina
- Charlotte Amalie, U.S. Virgin Islands
- Cheyenne and Arapaho Oklahoma Tribal Statistical Area, Oklahoma
- Chippewa Township, Pennsylvania
- Clemson, South Carolina
- Columbia, Tennessee
- Concho, Oklahoma
- Coopersville, Michigan
- Coweta, Oklahoma
- Delano Public School District, Minnesota
- Delano, Minnesota
- Denmark School District, Wisconsin
- Denmark, Wisconsin
- Easley, South Carolina
- Ecru, Mississippi
- Flowood, Mississippi
- Frederiksted, U.S. Virgin Islands
- Goodyear, Arizona
- Grenada, Mississippi
- Gulfport, Mississippi
- Hartwell, Georgia
- Hattiesburg, Mississippi
- Honea Path, South Carolina
- Iuka, Mississippi
- Iva, South Carolina
- Jackson, Mississippi
- Lexington, Mississippi
- Liberty, South Carolina
- Louisville, Mississippi
- Madison, Mississippi
- McComb, Mississippi
- McMurray, Pennsylvania
- Meridian, Mississippi
- New Britain, Connecticut
- Oxford, Mississippi
- Pendleton, South Carolina
- Pickens, South Carolina
- Piedmont, South Carolina
- Ridgeland, Mississippi
- Tupelo, Mississippi
- U.S. Virgin Islands
- Vaiden, Mississippi
- Vicksburg, Mississippi
- Webster, New York
- West, Mississippi
- Williamston, South Carolina
- Winona, Mississippi
- York, Pennsylvania
Operational impacts
28 valuesService effects recorded on related incidents
- Alternate service channel required
- Application unavailable
- Complete service outage
- Customer or public access restricted
- Downstream organization impact
- Educational operations disrupted
- Email disruption
- Event or activity cancellation
- Facility closure
- Government services disrupted
- Healthcare operations disrupted
- Internal systems unavailable
- Internet access disruption
- Manual workaround required
- Manufacturing or production disruption
- Network outage
- Online portal unavailable
- Partial service outage
- Payment processing disruption
- Phone service disruption
- Records access disruption
- Records processing disruption
- Scheduling disruption
- Service delay
- Staff sent home or placed on leave
- Staff unable to work normally
- Transaction processing disruption
- Website unavailable
Extortion indicators
12 valuesThreat groups in related incidents
8 valuesDerived through public incident claims
Attack mechanisms
6 valuesMechanisms recorded on related incidents
Data impacts
6 valuesData effects recorded on related incidents
DD-CIT assessments
3 valuesRansomware confidence
3 valuesCyber transparency
2 valuesCyber-transparency classifications of related incidents
Disruption transparency
2 valuesDisruption-transparency classifications of related incidents
Incident status
2 valuesCurrent status of related incidents
Attribution confidence
2 valuesThreat actor types
1 valueClassifications of related threat groups
Incident confidence
1 valueAssessment confidence of related incidents
Cyber assessment
1 valueCurrent assessment of whether incidents are cyber-related