This attack is most effective against victims without backups who are desperate to get back their data. If you have backups, you basically shrug it off, restore

This attack is most effective against victims without backups who are desperate to get back their data. If you have backups, you basically shrug it off, restore your data, (re)train your users and use forensics to mitigate any obvious weaknesses. In most cases, it takes less effort for the attackers to move on to the next victim instead of trying to extract value from any data they may have exfiltrated (probably none in a lot of cases).