The hacker, operating under the name The Dark Overlord, has already purportedly uploaded the first episode to an illegal file-sharing service. The Associated Press could not legally confirm the authenticity of that uploaded file.
New episodes of "Orange" are scheduled for official release on June 9.
Netflix said that a small production vendor that works with several major TV studios had suffered a breach. The Los Gatos, California, company described it as an "active situation" that's being investigated by the FBI and other authorities.
Pirated copies of "Orange" could dent Netflix's subscriber growth and the company's stock price.
In the ransom note, The Dark Overlord claimed to have stolen series from other studios, too, by breaking into a single company. The purported hacker promised to also release those titles unless "modest" ransoms are paid.
Rumors of a massive leak of Hollywood films and TV episodes have been circulating online for months, fed by purported screenshots of the footage and a copy of a proposed deal to delete the stolen material in return for tens of thousands of dollars in electronic currency.
When the AP contacted The Dark Overlord in February, the hacker said the purloined video wouldn't be made publicly available after all, making the far-fetched claim that "no one really (cares) about unreleased movies and TV show episodes."
It's not clear what triggered The Dark Overload's renewed ransom demands.
Netflix is counting on "Orange" to help it add 3.2 million subscribers from April through June. That's substantially higher than the company's average gain of 1.8 million subscribers in the same period over the past five years.
Whenever Netflix's quarterly subscriber gains fall shy of management's projections, the company's stock usually plunges.
Report a typo to the ABC13 staff