A U.S. government entity quietly paid roughly $1 million to a hacking group called Kairos after the group stole files and threatened to publish them publicly. The payment came to light through a leaked negotiation chat and an analysis of the blockchain trail the cryptocurrency payment left behind. Unusually, Kairos appears to operate as a data-theft extortion ring rather than a traditional ransomware gang — there is no evidence it ever locked any victim’s files. It simply steals data and demands payment to stay quiet.
The case is a reminder that data theft extortion can affect public institutions just as easily as private companies. While the affected entity has not been publicly identified, the incident follows a broader pattern of hackers targeting government agencies, hospitals, and schools — organisations that hold sensitive data and often face pressure to avoid public disclosures of breaches.