In addition, the company isn't the only victim in a ransomware attack, its customers are too.

And does anyone really believe the hackers deleted the data off their own servers? They can easily double-dip by selling that information. It's valuable, so why would they delete it?