Deconstructing a Cybersecurity Event

### Executive Summary On May 8, 2023 Dragos detected and contained a failed extortion attempt where a criminal group gained access via a compromised new hire personal email, accessed SharePoint and contract management resources (including a report with customer-associated IPs), attempted but did not succeed in deploying ransomware, and subsequently pursued extortion and threatened data disclosure; the report provides IOCs, MITRE ATT&CK mappings, and recommended mitigations.