Downstream organization impact

Service effects recorded on related incidents

• Alternate service channel required
• Application unavailable
• Backlog created
• Cloud service disruption
• Complete service outage
• Customer or public access restricted
• Degraded service
• Educational operations disrupted
• Event or activity cancellation
• Facility closure
• Government services disrupted
• Healthcare operations disrupted
• Internal systems unavailable
• Internet access disruption
• Manual workaround required
• Network outage
• Online portal unavailable
• Partial service outage
• Payment processing disruption
• Phone service disruption
• Records access disruption
• Records processing disruption
• Service delay
• Staff unable to work normally
• Third-party service disruption
• Transaction processing disruption

Incident impacts and related organization locations

• Burlington, Massachusetts
• Columbia, Tennessee
• Damariscotta, Maine
• Dana Point, California
• Kansas City, Missouri
• Knox County, Maine
• Lincoln County, Maine
• Madison, Wisconsin
• Nobleboro, Maine
• Pennington County, South Dakota
• Plano, Texas
• Rancho Murieta Community Services District, California
• Rancho Murieta, California
• Rapid City, South Dakota
• Sacramento County, California
• Sagadahoc County, Maine
• Salt Lake City, Utah
• Sandy, Utah
• Waldo County, Maine

Extortion evidence recorded on related incidents

• Countdown or payment deadline
• Data-theft extortion
• Direct victim contact
• Encryption-based extortion
• Full data publication
• Leak-site listing
• No known extortion indicator
• Payment reported
• Public leak threat
• Ransom demand

Mechanisms recorded on related incidents

• Data extortion
• Distributed denial of service (DDoS)
• Insider threat
• Malware
• Ransomware
• Unauthorized access
• Unknown cyber mechanism
• Vulnerability exploitation
• Website defacement

Data effects recorded on related incidents

• Data exposure
• Data publication or leak
• Data theft or exfiltration
• Data unavailable
• No known data impact
• Unauthorized data access
• Unknown data impact

Ransomware assessment of related incidents

• Confirmed
• High
• Not Ransomware
• Unresolved

Current status of related incidents

• Active
• Presumed Resolved
• Resolved

Actor attribution assessment

• High
• Low
• Medium

Derived through public incident claims

• DragonForce
• ShinyHunters

Classifications of related threat groups

• Ransomware Group

Transparency assessments of related incidents

• OC-OD

Assessment confidence of related incidents

• High

Current assessment of whether incidents are cyber-related

• Confirmed