Low in this case (read the CW article https://www.computerweekly.com/news/252476283/Cyber-gangsters-demand-payment-from-Travelex-after-Sodinokibi-attack https:/

Low in this case (read the CW article https://www.computerweekly.com/news/252476283/Cyber-gangsters-demand-payment-from-Travelex-after-Sodinokibi-attack https://www.computerweekly.com/news/252476283/Cyber-gangster...). The "ransom note" seems generic and it implies they aren't sophisticated data thieves, just disruptors. That said, there has been news of late that these kinds of attacks are indeed stepping up the value chain of stealing, selling, mining the data itself. But I would tend to think not, in this case, as the ransom note would have been much more severe.