A coercive property offense involving obtaining value through force, threat, or wrongful compulsion as defined by law. It requires proof of the coercive means and the intent to obtain or retain value or control. It does not include non-coercive takings or threats that do not meet the required unlawful compulsion elements. It addresses violent or coercive acquisition of property and is treated as high-severity in charging and sentencing. The concept is generally stable, though enhancements and grading criteria may change over time.

Principle

The organizing idea is coercive control of digitally held assets: unlawful deprivation or threat combined with a demand that benefits the attacker, with culpable intent to extort.

Demonstration

An attacker encrypts a hospital's patient records with ransomware and sends a demand for cryptocurrency, threatening to publicly release sensitive records unless paid within 72 hours.

Misapplication

Treating any malware incident as ransomware extortion without evidence of a demand or coercive purpose (for example, classifying a destructive wiper deployed during a sabotage operation as extortion).

Consequence

When properly identified and charged, parties may obtain criminal prosecution, asset seizure, injunctions against payment, court-ordered disclosure of attacker proceeds, and victim remedies such as restoration orders or restitution.

Reversal

If malware encrypts files but no demand or benefit-seeking communication follows, the act may instead qualify as unauthorized access, sabotage, or damage rather than extortion.

Boundary

Covers wrongful acts that combine the technical deployment of ransomware with a extortionate demand; it excludes legitimate recovery actions, authorized encryption, voluntary payments to regain access without coercion claims, and state-authorized seizure or encryption for lawful investigation.

Semantic Tension

Tension arises with related concepts such as blackmail (which may not involve malware), data breach for resale (where publication rather than ransom is the aim), and cyber vandalism (which lacks a demand for payment).

Synthesis

Ransomware extortion is the intersection of a cyber intrusion that disables or seizes digital assets and a criminal demand for benefit made under threat, judged by the presence of intent to coerce and a tangible request for payment or concession.