JRK Property Holdings, Inc.

JRK Property Holdings reported unauthorized activity in its IT environment and potential access to sensitive files, with the event tied in public reporting to extortion activity. The extortion is the business model layered on top of the real failure: the attacker obtained enough access to make stolen data useful as leverage. Once unauthorized access can become durable access, the attacker gets to decide what the incident becomes next.