

My understanding of your first sentence in the first comment was that you were saying that the hackers were trying to ‘intimidate the group (the company) into protecting the privacy of the children’.
That is what I based my response on. If I misunderstand, I apologize. (also, I didn’t down vote you, for what it’s worth, I appreciate the sincerity).
All good… I mistook the attribution of intent.
But they’ll just slow drip the release anyway, going back for more and more ransom if they do pay.
I guess my thing is (not knowing the company from Adam) I’d assume they’d rather not have the kid’s info released rather than simply not caring about it. Being hacked doesn’t necessarily mean they’re careless - I think that is what I was trying to convey.
I’m almost solely responsible for cyber security at my job. I do my best, make the case for better protections, and secure things as best I can. If we got ransomwared, I’d be tempted to blow my head off. I have to get it right every single time. They have to get right or lucky just once.