Leak size is the amount of data a threat actor claims was stolen or published during an intrusion, often expressed in gigabytes, file counts, or record counts. It is a claim, not proof: the number may reflect compressed archives, duplicate files, partial access, or exaggeration meant to pressure the victim.
In cyber security, leak size matters because it helps defenders estimate possible exposure, prioritize incident response, and judge extortion risk. A large number can suggest broader data access, but it does not confirm which systems were reached or whether sensitive records were actually exfiltrated. Defenders should verify logs, review access and transfer activity, compare file inventories, and confirm whether the published data matches internal records before making conclusions. In ransomware and extortion campaigns, leak size is often used as a public signal to create urgency, even when the underlying compromise remains unverified.