A disclosure deadline is a time limit set by a threat actor, usually as part of an extortion attempt, with a threat to publish data or reveal a breach if the target does not respond. It is a pressure tactic, not proof that the attacker has stolen data or can publish it.
Deadlines can prompt rushed negotiations, public statements, or technical decisions before facts are verified. Defenders should treat the threat as a signal to investigate: preserve evidence, assess whether systems or data were accessed, coordinate incident response and communications, and document what is confirmed. A clear verification process helps prevent an attacker’s timer from driving decisions.