Kairos Ransomware: Data-Extortion Case Study Involving a U.S. Government Entity

A U.S. government entity paid a $1 million ransom to the unverified data-extortion actor Kairos, whose leverage relied on data-theft and publication threats rather than ransomware encryption, with payment traced to ByBit, OKX, and BELQI exchanges—highlighting the urgent need for public-sector organizations to strengthen negotiation protocols and treat attacker deletion claims as unverifiable.