A leak inventory is a count, list, or catalog of files that an attacker says were stolen or exposed. It may describe filenames, folder names, record types, or an estimated number of documents and gigabytes. In practice, the inventory is often used to make an intrusion sound larger and more damaging than it can be proven to be.
Leak inventories matter because they shape extortion pressure, incident response, and public risk assessment. A detailed list can suggest access to sensitive systems, but it is not proof of full compromise unless the data is verified. Defenders use inventories to compare claimed samples against internal records, estimate affected users, and prioritize containment, legal review, and notification. Attackers use them to create urgency, support ransom demands, and imply credibility even when the evidence is partial or unconfirmed.