New research suggests a fair number of victims who do pay up may see some or all of the stolen data published anyway. The findings come in a report from Coveware, a company that specializes in helping firms recover from ransomware attacks. Coveware says nearly half of all ransomware cases now include the threat to release exfiltrated data. The company advises clients never to pay a data deletion ransom, but rather to engage competent privacy attorneys, perform an investigation into what data was stolen, and notify any affected customers.”]
Source: https://krebsonsecurity.com/2020/11/why-paying-to-delete-stolen-data-is-bonkers/