3538
Victims would discover they were hit with the data theft only when they accessed the MongoDB and came across a top database field with the ransom demand that read , “ Contact this email with your IP of your server to recover your database ” .
 ( ransom: the ransom demand,  the MongoDB: victim, they: victim, hit with the data theft: attack pattern, they: victim, Victims: victim) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( ransom: the ransom demand,  the MongoDB: victim, they: victim, hit with the data theft: attack pattern, they: victim, Victims: victim) 