Major ransomware incident disrupts U.S. critical infrastructure operations before 2026

Tracks whether a ransomware attack causes operational disruption at a U.S. critical infrastructure operator (energy, water, healthcare, transportation, or communications) before January 1, 2026. Qualifying incidents must involve confirmed operational impact—service outages, emergency shutdowns, or diversion to manual operations—reported by credible outlets or government advisories (CISA, FBI). Data exfiltration alone without operational disruption does not qualify. LONG if at least one qualifying incident occurs; SHORT if no qualifying operational disruption from ransomware on U.S. critical infrastructure is confirmed before the deadline.