Probably a boring answer but I know my grandmother’s credit card information. I live with and help take care of her, so she doesn’t mind sharing it with me. Not like I’m planning to do anything nefarious, but I guess technically it could ruin her financially.
I think it was right at the beginning. They may have low balled then the ransom guys came back with even a higher value. I don’t think the data have much in the value as it was mainly their ap and AR. One issue was they had in-house project management software developed that had hundreds of projects on the go and the stage they were at if I recall correctly.
I think you almost need to have a seperate department with a single IT guy whose only job is to test the security procedures. Not implement them but to just double check on the normal IT security procedures.