Depends on the clients. I remember a case where a family that hid their daughter's cosmetic surgeries had the marriage annulled when it was discovered by the groom's much wealthier family.

So a lucrative target might be someone who traveled from outside the US to have work done to hide it, especially if they were relatively young.

It’s always possible to come up with an extremely unlikely scenario where the data would he be extraordinarily valuable, but nobody is going to bet hundreds of thousands (or millions, to actually make it worth it for the ransomware gang) to buy the data.

Exception would likely be pictures of celebrities. Their managers would not want those being distributed and would sue whoever they could.

Again, that’s only good for extortion. Only worth tens of thousands if you’re going to sell them.

Agreed. Otherwise they would just be dumped on the web or put behind paywalls of dodgy sites.