Emergence of ALP-001: New Cyber Extortion Site on Dark Web

On March 22, 2026, a new Tor-based leak site named ALP-001 surfaced on underground forums, transitioning from selling network access to publicly naming victims. This site markets itself as a 'Data Leaks / Access Market,' indicating a shift towards cyber extortion tactics. The emergence of ALP-001 highlights a growing trend among initial access brokers who are now engaging in direct threats against organizations. Victims of this site could potentially include any corporate entity that has had its data compromised or access sold. The full scope of impact remains unclear as the site is still in its early stages of operation. Cybersecurity professionals are urged to monitor this development closely. The site combines elements of ransomware leak portals with initial access brokerage, suggesting a more aggressive approach to extortion. Current status indicates that the site is operational and actively advertising its services.

Key Points: • ALP-001 is a new Tor-based leak site that has shifted to cyber extortion. • The site openly markets itself as a 'Data Leaks / Access Market'. • This development reflects a trend among initial access brokers to name victims publicly.