In 2019, the Maze. group introduced a new tactic known as double-extension known as. the. Maze. groups. Need to pay a single. victim to. pay a. single. payment that will provide both a. decryptor for their. encrypted files and a. decryption. of their. files and then. threaten to release them publicly if a. victim is not paid. Now, not only are victims being extorted through the. encryption of their files but also by the risk of their data being published and causing a. data breach.
Source: https://www.bleepingcomputer.com/news/security/scam-psa-ransomware-gangs-dont-always-delete-stolen-data-when-paid/