Negotiation portal or ransom chat

Service effects recorded on related incidents

• Alternate service channel required
• Application unavailable
• Backlog created
• Complete service outage
• Customer or public access restricted
• Degraded service
• Downstream organization impact
• Educational operations disrupted
• Email disruption
• Event or activity cancellation
• Facility closure
• Government services disrupted
• Healthcare operations disrupted
• Intermittent service disruption
• Internal systems unavailable
• Internet access disruption
• Manual workaround required
• Network outage
• Online portal unavailable
• Partial service outage
• Payment processing disruption
• Phone service disruption
• Records access disruption
• Records processing disruption
• Remote access disruption
• Scheduling disruption
• Service delay
• Staff unable to work normally
• Transaction processing disruption
• Website unavailable

Incident impacts and related organization locations

• Anderson, South Carolina
• Box Elder County, Utah
• Brigham City, Utah
• Central, South Carolina
• Clemson, South Carolina
• Easley, South Carolina
• Fort Bend County, Texas
• Hartwell, Georgia
• Honea Path, South Carolina
• Houston, Texas
• Iva, South Carolina
• Kent County, Michigan
• Liberty, South Carolina
• Luna County, New Mexico
• Missouri City, Texas
• Needville, Texas
• Pendleton, South Carolina
• Pickens, South Carolina
• Piedmont, South Carolina
• Richmond, Texas
• Rockford Public Schools, Michigan
• Rockford, Michigan
• Silver City, New Mexico
• Sugar Land, Texas
• Williamston, South Carolina

Extortion evidence recorded on related incidents

• Countdown or payment deadline
• Data sample published
• Data-theft extortion
• Direct victim contact
• Encryption-based extortion
• Leak-site listing
• Operational disruption threat
• Payment denied
• Public leak threat
• Ransom demand
• Third-party pressure

Data effects recorded on related incidents

• Backup compromise
• Data encryption
• Data publication or leak
• Data theft or exfiltration
• Data unavailable
• Unauthorized data access
• Unknown data impact

Mechanisms recorded on related incidents

• Credential compromise
• Data extortion
• Malware
• Ransomware
• Unauthorized access

Derived through public incident claims

• INC Ransom
• Interlock
• Qilin
• The Gentlemen

Ransomware assessment of related incidents

• Confirmed
• High
• Medium

Cyber-transparency classifications of related incidents

• External cyber → official
• Official cyber

Current status of related incidents

• Presumed Resolved
• Resolved

Actor attribution assessment

• Low
• Medium

Classifications of related threat groups

• Ransomware Group

Transparency assessments of related incidents

• OC-OD

Disruption-transparency classifications of related incidents

• Official disruption

Assessment confidence of related incidents

• High

Current assessment of whether incidents are cyber-related

• Confirmed