Active

Incident impacts and related organization locations

• Allentown, Pennsylvania
• Anderson, South Carolina
• Beaver County, Pennsylvania
• Beaver, Pennsylvania
• Boyne City, Michigan
• Central, South Carolina
• Charlotte, North Carolina
• Childersburg, Alabama
• Clemson, South Carolina
• Coryell County, Texas
• Coweta, Oklahoma
• Delaware County, Pennsylvania
• Durant, Oklahoma
• Easley, South Carolina
• Evanston Township High School District 202, Illinois
• Evanston, Illinois
• Fort Worth, Texas
• Gallatin, Tennessee
• Gatesville, Texas
• Guam
• Hagåtña, Guam
• Hartwell, Georgia
• Honea Path, South Carolina
• Iva, South Carolina
• Kenai, Alaska
• Kenaitze Alaska Native Village Statistical Area, Alaska
• Liberty, South Carolina
• Madison, Wisconsin
• Media, Pennsylvania
• Mitchell, South Dakota
• Morehead City, North Carolina
• New York, New York
• Oceanside Unified School District, California
• Oceanside, California
• Pendleton, South Carolina
• Pennington County, South Dakota
• Pickens, South Carolina
• Piedmont, South Carolina
• Rapid City, South Dakota
• Salt Lake City, Utah
• Shell Lake, Wisconsin
• Suisun City, California
• Sumner County, Tennessee
• Tarrant County, Texas
• Washburn County, Wisconsin
• Waukegan Township, Illinois
• Waukegan, Illinois
• Williamston, South Carolina
• Wilmington, North Carolina
• Woodhaven Lakes, Illinois

Service effects recorded on related incidents

• Alternate service channel required
• Application unavailable
• Authentication disruption
• Backlog created
• Cloud service disruption
• Complete service outage
• Customer or public access restricted
• Degraded service
• Delayed opening or early closure
• Dispatch disruption
• Downstream organization impact
• Educational operations disrupted
• Email disruption
• Emergency communications disruption
• Event or activity cancellation
• Facility closure
• Government services disrupted
• Healthcare operations disrupted
• Internal systems unavailable
• Internet access disruption
• Manual workaround required
• Network outage
• Online portal unavailable
• Partial service outage
• Payment processing disruption
• Phone service disruption
• Public safety operations disrupted
• Records access disruption
• Records processing disruption
• Safety risk or operational hazard
• Scheduling disruption
• Service delay
• Staff unable to work normally
• Third-party service disruption
• Transaction processing disruption
• Transportation operations disrupted
• Utility operations disrupted
• Website unavailable

Extortion evidence recorded on related incidents

• Countdown or payment deadline
• Data-theft extortion
• Direct victim contact
• Encryption-based extortion
• Leak-site listing
• Negotiation portal or ransom chat
• No known extortion indicator
• Payment reported
• Public leak threat
• Ransom demand
• Third-party pressure
• Unknown extortion indicators

Mechanisms recorded on related incidents

• Credential compromise
• Data extortion
• Insider threat
• Malware
• Phishing
• Ransomware
• Unauthorized access
• Unknown cyber mechanism
• Vulnerability exploitation
• Website defacement

Data effects recorded on related incidents

• Data encryption
• Data exposure
• Data theft or exfiltration
• Data unavailable
• Unauthorized data access
• Unknown data impact

Derived through public incident claims

• Interlock
• NightSpire
• ShinyHunters
• The Gentlemen

Transparency assessments of related incidents

• OC-OD
• Pending–OD
• XC-OC-OD
• XC-OC-XD

Ransomware assessment of related incidents

• Confirmed
• High
• Low
• Unresolved

Actor attribution assessment

• High
• Low
• Medium

Assessment confidence of related incidents

• High
• Medium

Current assessment of whether incidents are cyber-related

• Confirmed
• Unresolved

Classifications of related threat groups

• Ransomware Group