Data extortion is a cybersecurity incident where personal or confidential data is stolen by an unauthorized user, and they demand a payment to prevent sensitive information from being publicized.