I thought the big advantage of ransomware (for "the gangs") was that it didnt actually require them to be able to extract the data. To impact a company you only

I thought the big advantage of ransomware (for "the gangs") was that it didnt actually require them to be able to extract the data. To impact a company you only needed to be able to get your malware on their device; extracting the data was not necessarily for you to acquire a ransom. If my company is beset by ransomware, and they claim they will release it I can either assume: 1. They have extracted the data and therefor have to assume they arent just going to delete it because I sent them a check. 2. They are bluffing and have only encrypted my data. I dont think I can count on #2.