Medium

Incident impacts and related organization locations

• Acworth, Georgia
• Alcorn School District, Mississippi
• Allentown, Pennsylvania
• Alpharetta, Georgia
• Baltimore, Maryland
• Bay City, Texas
• Bellingham, Washington
• Bellmawr, New Jersey
• Belmont, Michigan
• Big Rapids, Michigan
• Biggersville, Mississippi
• Boca Raton, Florida
• Bowman, North Dakota
• Boynton Beach, Florida
• Cape Coral, Florida
• Central Point School District 6, Oregon
• Central Point, Oregon
• Christiansted, U.S. Virgin Islands
• Cocoa, Florida
• Coconut Creek, Florida
• Comstock Park, Michigan
• Corinth, Mississippi
• Coweta County, Georgia
• Denmark School District, Wisconsin
• Denmark, Wisconsin
• Derby, Connecticut
• District of Columbia
• Estero, Florida
• Farmington Hills, Michigan
• Fort Lauderdale, Florida
• Fort Myers, Florida
• Glen, Mississippi
• Glenolden, Pennsylvania
• Gold Hill, Oregon
• Grand Rapids, Michigan
• Grandville, Michigan
• Greenacres, Florida
• Greenville, Michigan
• Hanover Township, Pennsylvania
• Houston, Texas
• Interboro School District, Pennsylvania
• Ionia, Michigan
• Irving, Texas
• Jenison, Michigan
• Jupiter, Florida
• Kentwood, Michigan
• Kossuth, Mississippi
• Ladysmith, Wisconsin
• Lake Mary, Florida
• Lake Worth, Florida
• Lincoln, Maine
• Lowell, Michigan
• Luna County, New Mexico
• Maryland
• Matagorda County, Texas
• Miami, Florida
• Middletown, Ohio
• Mount Pleasant, Michigan
• Newnan, Georgia
• North Miami Beach, Florida
• North Palm Beach, Florida
• Oakland Community Unit School District 5, Illinois
• Oakland, Illinois
• Palm Beach Gardens, Florida
• Park City, Utah
• Pell City School District, Alabama
• Pell City, Alabama
• Plantation, Florida
• Port St. Lucie, Florida
• Royal Palm Beach, Florida
• Rusk County, Wisconsin
• Sarasota, Florida
• North Whitehall Township, Pennsylvania
• Silver City, New Mexico
• Snyderville Basin Water Reclamation District
• Spartanburg County, South Carolina
• Spartanburg, South Carolina
• Spring Lake Park Schools, Minnesota
• Spring Lake Park, Minnesota
• Stuart, Florida
• Suisun City, California
• Tamaqua, Pennsylvania
• Tampa, Florida
• Wagon Mound Public Schools, New Mexico
• Wagon Mound, New Mexico
• Walker, Michigan
• Washington, District of Columbia
• Waxhaw, North Carolina
• West Chester Township, Ohio
• West Palm Beach, Florida
• Westfield, New Jersey
• Wyoming, Michigan

Service effects recorded on related incidents

• Alternate service channel required
• Application unavailable
• Authentication disruption
• Backlog created
• Complete service outage
• Customer or public access restricted
• Database unavailable
• Degraded service
• Dispatch disruption
• Downstream organization impact
• Educational operations disrupted
• Email disruption
• Emergency communications disruption
• Event or activity cancellation
• Facility closure
• Government services disrupted
• Healthcare operations disrupted
• Intermittent service disruption
• Internal systems unavailable
• Internet access disruption
• Manual workaround required
• Manufacturing or production disruption
• Network outage
• No known operational impact
• Online portal unavailable
• Partial service outage
• Payment processing disruption
• Phone service disruption
• Public safety operations disrupted
• Records access disruption
• Records processing disruption
• Remote access disruption
• Retail operations disrupted
• Safety risk or operational hazard
• Scheduling disruption
• Service delay
• Staff sent home or placed on leave
• Staff unable to work normally
• Supply chain disruption
• Third-party service disruption
• Transaction processing disruption
• Transportation operations disrupted
• Website unavailable

Extortion evidence recorded on related incidents

• Countdown or payment deadline
• Data sample published
• Data-theft extortion
• Direct victim contact
• Encryption-based extortion
• Full data publication
• Leak-site listing
• Negotiation portal or ransom chat
• No known extortion indicator
• Payment denied
• Public leak threat
• Ransom demand
• Unknown extortion indicators

Derived through public incident claims

• INC Ransom
• Interlock
• LockBit
• Medusa
• metaencryptor
• Nitrogen
• pear
• Qilin
• RansomHub
• Rhysida
• SafePay
• ShinyHunters

Data effects recorded on related incidents

• Backup compromise
• Data encryption
• Data publication or leak
• Data theft or exfiltration
• Data unavailable
• No known data impact
• Unauthorized data access
• Unknown data impact

Mechanisms recorded on related incidents

• Credential compromise
• Data extortion
• Malware
• Ransomware
• Unauthorized access
• Unknown cyber mechanism
• Vulnerability exploitation

Transparency assessments of related incidents

• OC-ND
• OC-OD
• XC-OC-OD
• XC-OD
• XC-XD

Current status of related incidents

• Active
• Presumed Active
• Presumed Resolved
• Resolved

Cyber-transparency classifications of related incidents

• External cyber → official
• External cyber only
• Official cyber

Disruption-transparency classifications of related incidents

• External disruption only
• No disruption cues
• Official disruption

Actor attribution assessment

• Low
• Medium
• Unresolved

Assessment confidence of related incidents

• High
• Medium

Current assessment of whether incidents are cyber-related

• Confirmed
• Suspected

Classifications of related threat groups

• Ransomware Group