The act of an attacker or trusted insider who steals information from a computer system and demands compensation for its return or for an agreement not to disclose the information; also known as cyber extortion.