Indeed. I'm puzzled by this: > "Stealing data essentially gives threat actors additional bargaining chips when it comes to dealing with companies unwilling to

Indeed. I'm puzzled by this: > "Stealing data essentially gives threat actors additional bargaining chips when it comes to dealing with companies unwilling to pay the ransom. The idea is to weaponise the hefty fines associated with GDPR violations to pressure the company into paying." I can't imagine that promises from REvil/Sodinokibi that stolen data had been deleted would reduce fines over GDPR violations.