Just an aside, "ransom" is probably not the right word, since I presume they are not taking money to destroy or not release the data. They're selling the data

Just an aside, "ransom" is probably not the right word, since I presume they are not taking money to destroy or not release the data. They're selling the data to anyone, and probably will be happy to sell the same data many times over.