Simple definition
Triple extortion adds another form of pressure to a double-extortion scenario beyond encryption and threatened disclosure.
Purpose and use
Attackers may pressure customers or partners, or threaten another disruption to increase coercion.
How does it work?
The term describes combined pressure rather than one specific technique. Incident records must state what was actually stolen, disrupted or threatened.
Key points
- Example: following data theft and encryption, outside contacts also receive demands or threats connected with the incident.
- Assess each element separately and coordinate technical response, communications and handling of affected parties.
Points to watch
Usage varies between reports. A claimed threat does not prove it was carried out; assertions need corroboration.
In short
Triple extortion describes additional pressure whose nature must be specified for each incident.