3537
That ’s when he said a hacker going by the handle “ Harak1r1 ” was compromising open MongoDB installations , deleting their contents , and leaving behind a ransom note demanding 0.2 BTC ( about $ 220 ) .
 ransom: a ransom note demanding
Please tell me event type and its trigger word from given type options. Output format is "type: trigger".  Option: phishing, data breach, ransom, discover vulnerability, patch vulnerability 
Text: {0} 
Answer:
 ransom: a ransom note demanding