Attacks and malware
What is Double extortion?
Ransomware tactic of stealing data before encrypting it, then threatening to publish the data if the victim refuses to pay.
Double extortion combines two threats. The attacker encrypts the victim's systems and also steals data beforehand, then threatens to publish it on a leak site if the ransom is not paid. Restoring from backups no longer removes the pressure.
Some groups add further pressure, sometimes called triple extortion: contacting customers or patients, launching DDoS attacks or reporting the breach to regulators themselves.