The use of [[encryption]] to "ransom" data, where the [[decryption key]] is only provided on payment. Payment is generally via [[Bitcoin]] or a similar pseudononymous currency. There is also the risk of [[exfiltration]], because the [[attacker|threat actor]] has access to the data, which may have a reputational [[impact]]. Ransomware is now being offered as a [[service]]