Ransomware shifts to extortion, making data leaks harder to track
Ransomware evolution into extortion without encryption combined with groups faking attacks using old or public data means reputation damage, not decryption, is now the main leverage. Traditional metrics based on leak site disclosures no longer paint an accurate picture. This also makes it that much harder for defenders, regulators, and even law enforcement.