but the parent post's point still stands - extortion (or ransom) requires something important to be held. If the private data of customers is not actually impor

but the parent post's point still stands - extortion (or ransom) requires something important to be held. If the private data of customers is not actually important, it cannot be used as a threat in the extortion.