An extortion payment is money transferred because a threat actor is pressuring a victim to comply, usually under threat of data loss, public disclosure, service disruption, or other harm. In ransomware cases, the payment may be called a ransom, but the underlying idea is the same: the attacker is using coercion to extract money.
This matters in cyber security because payment is not a recovery control. Even when victims pay, attackers may not provide a working decryptor, may return incomplete data, or may keep copying information for later abuse. Defenders treat extortion payment as a business-risk decision, not a technical fix. Strong backups, tested restoration, network segmentation, and incident response planning reduce the chance that an organization feels forced to negotiate under time pressure.