Cyber extortion is a pressure campaign that uses threats, stolen data, or both to force a target to pay money, hand over access, or change behavior. The threat may involve leaking files, disrupting systems, impersonating insiders, or continuing harassment until the victim complies. It is common in ransomware operations, but it can also appear without encryption when attackers rely only on fear and exposure.
This matters because the damage is not limited to technical compromise. A stolen payment record, negotiation note, or sample of exfiltrated data can increase leverage and make the incident harder to contain. Defenders respond by limiting data exposure, preserving evidence, segmenting sensitive systems, and planning for legal and communications needs. Strong backups, access controls, and rapid incident response reduce the attacker’s leverage and make extortion less effective.