SentinelOne Security Incident

Author: SentinelOne Updated: July 29, 2025 Double extortion is a tactic used by ransomware attackers where they not only encrypt data but also threaten to leak it. This guide explores how double extortion works, its implications for victims, and strategies for prevention. Learn about the importance of data backups and incident response planning. Understanding double extortion is crucial for organizations to protect their sensitive information. Double extortion underscores the evolving sophistication of cyber threats, highlighting the need for a holistic approach to cybersecurity that encompasses robust defenses against ransomware, vigilant data protection, and incident response strategies. A Brief Overview of Double Extortion Double extortion is a sophisticated cyber threat tactic that has reshaped the landscape of ransomware attacks in recent years. This malicious strategy involves cybercriminals not only encrypting a victims data but also stealing sensitive information prior to encryption, effectively holding it hostage. If the victim refuses to pay the ransom for decrypting their data, the attackers threaten to publicly release or sell the stolen information, amplifying the stakes and consequences of the attack. Double extortion first emerged as a noticeable trend in the ransomware landscape around 2019, with the emergence of notable strains like Maze and REvil . These cybercriminal groups recognized the immense value of the data they were compromising and began demanding additional ransoms, typically in cryptocurrency, under the threat of exposing this data. This innovative approach significantly increased the financial pressure on victims and made it more likely that they would comply with the extortion demands. Today, double extortion attacks have become alarmingly prevalent. Cybercriminals use it to target a wide range of organizations, from small businesses to large enterprises and even government institutions. The stolen data often includes sensitive...

... (truncated for display)