> They're not using cryptography, but aren't they demanding ransom?

No, a ransom is a fee paid for the release of something you value. Cryptography is one way to take a user's data, and release it back to them on payment.

This is blackmail. They want payment to not release something.

To me, ransomware attacks are specifically "the malware got in and turned all my data to mush; the attacker doesn't care about my data, just that I'll pay to un-mush it."

This is "the malware got in and sent copies back home; now home base is threatening release and expecting payment to prevent it." To me, this is blackmail done via hacking, not ransomware.

Fwiw, many actors doing the former are also doing the latter. If someone paid you once to unencrypt, presumably they'll pay you again to not disclose the data. The line between those two business models is pretty blurry.

They are demanding a ransom, but Ransomware has a commonly accepted definition which requires encrypting files and demanding payment to decrypt them. [0]

[0] https://en.wikipedia.org/wiki/Ransomware

They are not demanding ransom. Ransom is (per Merriam Webster): "a consideration paid or demanded for the release of someone or something from captivity".

They copied the data, and they want money otherwise they will release it. It's ordinary blackmail.

Perhaps you could say they are ransoming the exclusive ownership of the data. But yes, 'blackmail' seems like a better fit.

The very first sentence of that link would include this under "ransomware"

> Ransomware is a type of malware from cryptovirology that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid.

(added emphasis)

That's a single sentence pulled from a very long definition, though.

Here's the third sentence from that very same paragraph:

>It encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them.

Not everything can be explained in a single sentence.

It's blackmail.

Against whom? Where is the profit mechanism? Are the hackers really prepared to track down every patient and try to blackmail them? It’s like the emails you get some times from hackers that have an old password of yours and threaten to release that video of you pleasuring yourself. Seriously?

Against the firm that let their patients' private data leak. Medical groups tend to have deep pockets.