Breach extortion is a coercion tactic in which someone claims to have accessed an organization’s systems or data and demands payment. The claim may rely on genuine but limited access, such as stolen credentials exposing a small amount of corporate information; that evidence does not by itself prove a broad compromise.
In cyber security, the tactic matters because even narrow or unverified access claims can create operational and reputational pressure. Defenders should preserve evidence, verify what systems and data were actually accessed, revoke exposed credentials, and investigate for further activity. Treating a claim seriously while distinguishing confirmed facts from the extortionist’s assertions helps avoid both panic and missed risks.