LevelBlue TTP Briefing Finds Attackers Now Treat Stolen Data, Not Encryption, as Their Main Leverage
The LevelBlue TTP Briefing for Q3 2026 finds that attackers increasingly rely on stolen data rather than encryption to pressure organisations into paying. Data exfiltration appeared in 83 per cent of investigated intrusions, compared with 67 per cent involving encryption. Attacks involving data theft and extortion without ransomware also increased, highlighting a shift in how threat actors operate. The latest…