Leak site
Also known as Shame site, Victim blog
A site run by a ransomware crew where they name victims and publish stolen data to pressure them into paying.
Most active ransomware groups run one. A victim is listed with a countdown, sometimes with sample files as proof, and the full set is dumped when the deadline passes. Security researchers scrape these sites, which is how breaches often become public before the victim has said anything.
Being listed is not always proof of a serious compromise. Crews inflate claims, relist old victims, and occasionally name organizations they only touched through a vendor. Verify before reacting, but treat a listing as a credible signal worth investigating immediately.
Where this comes up
Leak site sits inside our cybersecurity and threats work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.