Ransomware actors often target and threaten to sell or leak exfiltrated data or authentication information if the ransom is not paid