3624
At the time of our article , Harak1r1 had hijacked just over 1,800 MongoDB databases , and 11 victims have paid the ransom in order to recover their files .
 ( ransom: have paid the ransom,  victims: victim, hijacked: attack pattern, Harak1r1: attacker, MongoDB databases: victim) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( ransom: have paid the ransom,  victims: victim, hijacked: attack pattern, Harak1r1: attacker, MongoDB databases: victim) 