County Government Reportedly Paid $1 Million to Cyber Extortion Group

The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data. The post County Government Reportedly Paid $1 Million to Cyber Extortion Group appeared first on SecurityWeek .

According to Ransom-ISAC reporting summarized by SecurityWeek and others, a small U.S. county government (likely in Ohio) paid about $1 million in cryptocurrency to the Kairos cyber extortion group to prevent public release of sensitive data stolen in a May 2025 intrusion.[2][3][4][5] The group reportedly focused on data theft and extortion rather than ransomware encryption, and provided unverifiable 'proof of deletion' after payment.[4][5] From a RealGround perspective, this illustrates the broader risk context in which AI-enabled tools can amplify data-theft extortion operations (e.g., for credential guessing, negotiation scripting, and data analysis), increasing pressure on public entities. Strengthening identity controls, monitoring data exfiltration, and establishing a tested incident response and extortion-handling playbook are critical security measures that should be assessed and improved through an AI Security Readiness Assessment.