A leak deadline is a date and time set by an attacker in an extortion campaign to pressure a victim. It usually appears on a ransomware leak site, in a ransom note, or in public threats that claim stolen data will be released if demands are not met. The deadline is not a technical control; it is a psychological lever designed to create urgency and force a quick response.
In cyber security, leak deadlines matter because they can indicate active extortion, even when other facts are still unclear. Defenders should treat the deadline as a threat indicator, then verify whether data was actually stolen, whether systems were encrypted, and whether exposure is limited or broader than claimed. Good response includes preserving evidence, checking logs for exfiltration, isolating affected systems, and coordinating legal and incident response teams. A leak deadline signals pressure, but it is not proof of compromise on its own.