Ransomware leak sites weaponize stolen data publicly

Ransomware groups now use dedicated leak sites (DLSs) to publish stolen corporate data after encryption. First appearing in late 2019, DLSs enable double extortion by threatening full public disclosure unless payment is made. The FBI and CISA classify ransomware as a data theft and extortion problem.