An extortion leak is a pressure tactic in which an attacker claims to have stolen data and uses that claim to force payment, concessions, or urgency from the victim. The material may be real, partial, inflated, or even fabricated, but the goal is the same: create fear of exposure.
In cyber security, extortion leaks matter because the claim itself can trigger incident response, legal review, and reputational harm before any compromise is confirmed. Attackers often publish sample files, dataset counts, or victim names to make the allegation look credible. Defenders should verify evidence, assess what data could actually be exposed, and avoid accepting attacker framing as fact. Strong backups, segmented systems, logging, and rapid validation help reduce leverage and improve response.