Healthcare operations disrupted

Incident impacts and related organization locations

• Anderson, South Carolina
• Beaver County, Pennsylvania
• Beaver, Pennsylvania
• Bridgewater, Massachusetts
• Brockton, Massachusetts
• Burley, Idaho
• Central, South Carolina
• Clemson, South Carolina
• Columbia, Tennessee
• Easley, South Carolina
• Easton, Massachusetts
• Fort Worth, Texas
• Hartwell, Georgia
• Honea Path, South Carolina
• Iva, South Carolina
• Kenai, Alaska
• Kenaitze Alaska Native Village Statistical Area, Alaska
• Kendrick, Idaho
• Lewiston, Idaho
• Liberty, South Carolina
• Mauston, Wisconsin
• Moscow, Idaho
• Pendleton, South Carolina
• Pickens, South Carolina
• Piedmont, South Carolina
• Plymouth, Massachusetts
• Potlatch, Idaho
• Raynham, Massachusetts
• Rupert, Idaho
• Stoughton, Massachusetts
• Tarrant County, Texas
• Troy, Idaho
• Williamston, South Carolina

Service effects recorded on related incidents

• Alternate service channel required
• Application unavailable
• Backlog created
• Customer or public access restricted
• Downstream organization impact
• Email disruption
• Event or activity cancellation
• Facility closure
• Government services disrupted
• Internal systems unavailable
• Internet access disruption
• Manual workaround required
• Network outage
• Online portal unavailable
• Partial service outage
• Phone service disruption
• Records access disruption
• Records processing disruption
• Scheduling disruption
• Service delay
• Staff unable to work normally

Extortion evidence recorded on related incidents

• Countdown or payment deadline
• Data-theft extortion
• Direct victim contact
• Encryption-based extortion
• Leak-site listing
• Negotiation portal or ransom chat
• Payment reported
• Public leak threat
• Ransom demand
• Third-party pressure

Derived through public incident claims

• Anubis
• Blackwater
• Dark Project
• DragonForce
• Interlock
• The Gentlemen

Mechanisms recorded on related incidents

• Credential compromise
• Data extortion
• Malware
• Ransomware
• Unauthorized access
• Unknown cyber mechanism

Data effects recorded on related incidents

• Data encryption
• Data theft or exfiltration
• Data unavailable
• Unauthorized data access
• Unknown data impact

Ransomware assessment of related incidents

• Confirmed
• High
• Low
• Unresolved

Current status of related incidents

• Active
• Presumed Resolved
• Resolved

Transparency assessments of related incidents

• OC-OD
• XC-OC-XD

Actor attribution assessment

• Low
• Medium

Classifications of related threat groups

• Ransomware Group

Assessment confidence of related incidents

• High

Current assessment of whether incidents are cyber-related

• Confirmed