Victim naming is the public identification of a target in an extortion post, leak site entry, or ransomware claim. Attackers may name a company, business unit, or website to pressure the target, attract attention, and signal credibility to other victims. The name may appear before any proof of intrusion is shown, so it should be treated as an allegation, not confirmation.
In cyber security, victim naming matters because it can create urgent reputational and operational risk even when the technical facts are unclear. Defenders use the named victim to correlate logs, check alerts, and compare the claim with endpoint, network, and backup telemetry. A public name can help analysts triage a possible incident, but it does not prove encryption, data theft, or downtime. Careful verification prevents attackers from turning a claim into unnecessary panic.