These days attacks labeled “ransomware” in the news seem to be hybrid attacks. There usually is sensitive data exfiltration in addition to encrypt-in-place.