A Dedicated Leak Site (DLS) is a criminal website used by extortion groups to publish, preview, or threaten to publish stolen data. The goal is pressure: by naming the victim and exposing file samples, attackers try to force payment, negotiations, or other concessions. A DLS is often part of double extortion, where the victim is threatened with both data release and disruption.
DLS pages matter because they turn exfiltrated files into leverage. Attackers may list document categories, timestamps, screenshots, or download links to make the claim look credible. Defenders use DLS monitoring to spot victim mentions, validate whether exposed data is real, and accelerate incident response. Good defenses include limiting data exfiltration paths, segmenting sensitive repositories, enforcing least-privilege access, and watching for unusual uploads or archive creation that may precede a leak-site post.