Kivlenieks was in a hot tub and tried to get clear along with several others after the firework tilted and shot in their direction and then hit him in the chest.
The Russia-linked group, which has been in the crosshairs of the US cybersecurity establishment, has demanded the payment in exchange of restoring the data they are holding ransom.