For the record - I’d shut down Kiteworks servers full stop temporarily, not for 6 hours on Saturday, until the situation becomes clear. Chances are that law enforcement is monitoring the extortion group and knows when they plan to smash and grab. Obviously, that timing is out the window now due to the public report - the threat actor will start to smash and grab now. Monitor the amount of outbound network traffic from Kitework boxes for very high volumes.