Leak Sites: A Field Guide
Barracuda Networks, Tuesday, August 25th, 2026
Barracuda explains how ransomware leak sites work and how defenders can use them to assess risk and monitor threat activity.
Ransomware leak sites have become a prominent feature of modern cyber extortion, publishing claims about breached organizations and stolen data as leverage during negotiation.
This field guide explains what a leak-site post actually is and what its claims are worth, since attackers have every incentive to exaggerate what they hold. It covers how to use leak sites to assess risk, including monitoring for mentions of your own organization or supply chain partners.
The article is aimed at helping security teams turn leak-site monitoring into better-informed decisions rather than a source of alarm.