The material they said they would publish

Situation. A business owner with a public profile. No dispute in progress, no campaign running, no warning.

The attack. Compromised private material, obtained without consent. Then the demand: payment, or it goes to journalists.

Nothing to remove, nothing to suppress, nothing indexed. The material was not public, and the entire threat lay in the possibility that it might become so. The clock was set by someone else. And the target was not the business.

What most people do. Pay — which buys nothing, since the material still exists and the payment establishes that this target pays. Or go silent and wait, which surrenders the timing and usually produces a second, larger demand.

What we did.

• Took the client out of the conversation. No principal should ever negotiate his own extortion.
• Established what actually existed, as against what was claimed.
• Ran the negotiation as an identification operation — extended, patient, plausible, with every exchange designed to require the other side to reveal something. They believed they were closing a deal. They were building a file.
• Brought the evidence to law enforcement once it was complete.
• Closed the door behind them — forensics on the compromise, the affected systems rebuilt, credentials and cloud accounts reset, wider exposure reviewed.

Outcome. The individuals were identified and prosecuted. No payment was made. The material was never published.

The lesson. An extortionist's only real asset is your fear of the clock. Take the clock away — by refusing to be the one negotiating, and by treating every exchange as evidence-gathering rather than bargaining — and the position inverts.