2411
A ransomware variant which has been relatively inactive for almost two years is back , and this time it 's stealing user credentials from victims in addition to demanding a ransom to unencrypt locked files .
 data breach: stealing
Please tell me event type and its trigger word from given type options. Output format is "type: trigger".  Option: phishing, data breach, ransom, discover vulnerability, patch vulnerability 
Text: {0} 
Answer:
 data breach: stealing