August 2021

A group of cybercriminals used ransomware to disrupt the operations of a school district that comprised of over 10,000 students. Both students and staff were unable to access their workstations, and a multi-million dollar ransom was demanded. A global incident response firm (IR), who was notified by the school district, began their IT forensics and incident response. Soon after, a communication line was established between IR and the threat actors to start the process of negotiating a discounted ransom.