Verified impact is confirmed evidence of what an incident actually affected. It is not a threat actor claim, a victim listing, or a rumor. In cyber security, verified impact comes from proof such as logs, forensic images, endpoint alerts, file access records, outage data, or validated data-exfiltration evidence.
This matters because attackers often announce damage before defenders can confirm it. A public ransom note may name a company, but that does not prove systems were encrypted, records were stolen, or services were disrupted. Security teams use verified impact to separate allegation from fact, decide whether to isolate hosts, restore backups, notify customers, or involve legal and regulatory teams. The concept also helps reduce panic and prevents overreporting or underreporting during response.