Extortion

Extortion in the AI governance context refers to malicious actors leveraging AI systems, data, or algorithmic capabilities to coerce organizations into paying money or transferring assets under threat. This includes threats to expose sensitive training data, exploit model vulnerabilities, or disrupt AI-dependent operations through adversarial attacks. Enterprise organizations must establish incident response protocols and cybersecurity controls to detect extortion attempts and comply with reporting requirements under evolving AI accountability regulations.

1 item

ResearchGlobal2026-09-08

Google Mandiant: Extortion Crews Now Targeting Proprietary AI Models and Training Data

Google Mandiant's AI Threat Tracker has documented multiple extortion incidents in Q2 2026 where threat actors stole proprietary AI assets, including models, source code, prompts, and research data, then demanded ransoms under threat of public release. Threat group UNC6780 (TeamPCP) has been linked to supply chain attacks on PyPI, npm, and Docker Hub designed to harvest cloud and AI credentials. Affected sectors include healthcare, pharmaceutical, technology, and media organizations in North America and Europe.

Google Mandiant UNC6780 AI data theft extortion supply chain risk model security incident response credential harvesting