Authentication disruption

Incident impacts and related organization locations

• Anderson, South Carolina
• Auburn, Indiana
• Bay Lake, Florida
• Bear, Delaware
• Bellingham, Washington
• Boston, Massachusetts
• Bridgewater Township, New Jersey
• Brookhaven, Pennsylvania
• Chadds Ford, Pennsylvania
• Charleston, South Carolina
• Chester Heights, Pennsylvania
• Clayton, Missouri
• Columbia, South Carolina
• DeKalb County, Indiana
• East Caln Township, Pennsylvania
• East Marlborough Township, Pennsylvania
• Eddystone, Pennsylvania
• Evanston Township High School District 202, Illinois
• Evanston, Illinois
• Folsom, Pennsylvania
• Haverford Township, Pennsylvania
• Hollywood, Florida
• Houston, Texas
• Lake Buena Vista, Florida
• Marquisville, Iowa
• Media, Pennsylvania
• Natick, Massachusetts
• New York City, New York
• Newtown Township, Pennsylvania
• Northern Mariana Islands
• Paoli, Pennsylvania
• Philadelphia, Pennsylvania
• Phoenix, Arizona
• Phoenixville, Pennsylvania
• Provo, Utah
• Raleigh, North Carolina
• Ridgefield, Connecticut
• Saint Paul, Minnesota
• Saipan, Northern Mariana Islands
• San Antonio, Texas
• San Francisco, California
• Saydel Community School District, Iowa
• Sharon Hill, Pennsylvania
• South Carolina
• Spokane School District No. 81, Washington
• Spokane, Washington
• Springfield Township, Pennsylvania
• West Chester, Pennsylvania
• West Columbia, South Carolina
• Wilmington, Delaware

Service effects recorded on related incidents

• Alternate service channel required
• Application unavailable
• Cloud service disruption
• Complete service outage
• Customer or public access restricted
• Database unavailable
• Degraded service
• Downstream organization impact
• Educational operations disrupted
• Email disruption
• Event or activity cancellation
• Facility closure
• Government services disrupted
• Intermittent service disruption
• Internal systems unavailable
• Internet access disruption
• Manual workaround required
• Network outage
• Online portal unavailable
• Partial service outage
• Payment processing disruption
• Phone service disruption
• Records access disruption
• Records processing disruption
• Remote access disruption
• Safety risk or operational hazard
• Service delay
• Staff unable to work normally
• Third-party service disruption
• Transaction processing disruption
• Website unavailable

Extortion evidence recorded on related incidents

• Countdown or payment deadline
• Data sample published
• Direct victim contact
• Full data publication
• Leak-site listing
• No known extortion indicator
• Operational disruption threat
• Payment denied
• Payment instructions provided
• Public leak threat
• Ransom demand
• Unknown extortion indicators

Data effects recorded on related incidents

• Data alteration or manipulation
• Data corruption
• Data deletion or destruction
• Data encryption
• Data exposure
• Data publication or leak
• Data theft or exfiltration
• Data unavailable
• Unauthorized data access
• Unknown data impact

Mechanisms recorded on related incidents

• Credential compromise
• Distributed denial of service (DDoS)
• Insider threat
• Phishing
• Ransomware
• Unauthorized access
• Unknown cyber mechanism

Ransomware assessment of related incidents

• Confirmed
• Low
• Medium
• Not Ransomware
• Unresolved

Derived through public incident claims

• INC Ransom
• Interlock
• NightSpire
• SafePay

Current status of related incidents

• Active
• Presumed Active
• Presumed Resolved
• Resolved

Cyber-transparency classifications of related incidents

• External cyber → official
• External cyber only
• Official cyber

Actor attribution assessment

• Low
• Unresolved

Classifications of related threat groups

• Ransomware Group

Transparency assessments of related incidents

• OC-OD

Disruption-transparency classifications of related incidents

• Official disruption

Assessment confidence of related incidents

• High

Current assessment of whether incidents are cyber-related

• Confirmed