Marketo: A Return to Simple Extortion

This report details the Marketo data-extortion marketplace, a group active since April 2021 that publishes and auctions compromised data (simple extortion) rather than deploying encryption-based ransomware. It outlines Marketo's operation model (data leak site with evidence packs and blind auctions), victimology (34 organizations over three months across sectors including industrial, healthcare, and technology), pressure tactics (sharing samples with partners/competitors, public shaming, incremental data publication), and the broader implications for incident response and data protection.