More likely scenario: the attackers demand 10 mil knowing that 10 would be an unlikely best case scenario and a more likely outcome would be something like 2 m

More likely scenario: the attackers demand 10 mil knowing that 10 would be an unlikely best case scenario and a more likely outcome would be something like 2 mil, passed on on exchange for the keys by a cooperating fake computer forensics firm that claims to be able to restore the data without paying the attackers. For only 3 mil, an absolute bargain. The victim would pay the 3 mil, either falling for the show or claiming to be falling for the show.