--- title: "Ransomware: Cybercriminals are adding a new twist to their demands - Interbit Data" description: Pay the ransom or we'll leak your data is the latest trend, warns cybersecurity company. image: https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Imported_Blog_Media/Yourfilesencrypted-1.png --- [Skip to main content](https://interbitdata.com/blog/ransomware-cybercriminals-are-adding-a-new-twist-to-their-demands#main-content) [Knowledge Base Login](https://knowledge.interbitdata.com/en/knowledge)     [Support](https://interbitdata.com/support/) [![Interbit Logo](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg) ![Interbit Logo](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg)](https://interbitdata.com) - [Show submenu for Solutions Solutions](https://interbitdata.com/solutions/beacon) - [Beacon Downtime](https://interbitdata.com/solutions/beacon/downtime) - [Beacon Delivery](https://interbitdata.com/solutions/beacon/delivery) - [Beacon Navigator](https://interbitdata.com/solutions/beacon/navigator) - [PatientPath](https://interbitdata.com/solutions/patientpath) - [Blog](https://interbitdata.com/blog) - Show submenu for Resources Resources - [Events](https://interbitdata.com/resources/events/) - [Resources](https://interbitdata.com/resources/success-stories/) - Show submenu for About Us About Us - [Meet the Team](https://interbitdata.com/about/team) - [Partners](https://interbitdata.com/about/partners) Open main navigation Close main navigation - Show submenu for Solutions Solutions - Solutions - [Solutions](https://interbitdata.com/solutions/beacon) - [Beacon Downtime](https://interbitdata.com/solutions/beacon/downtime) - [Beacon Delivery](https://interbitdata.com/solutions/beacon/delivery) - [Beacon Navigator](https://interbitdata.com/solutions/beacon/navigator) - [PatientPath](https://interbitdata.com/solutions/patientpath) - [Blog](https://interbitdata.com/blog) - Show submenu for Resources Resources - Resources - [Events](https://interbitdata.com/resources/events/) - [Resources](https://interbitdata.com/resources/success-stories/) - Show submenu for About Us About Us - About Us - [Meet the Team](https://interbitdata.com/about/team) - [Partners](https://interbitdata.com/about/partners) - Search - [Request a Demo](https://interbitdata.com/request-a-demo) [Request a Demo](https://interbitdata.com/request-a-demo) Search [Blog](https://interbitdata.com/blog) Tags - [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) - [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) - [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) - [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) - [Company News](https://interbitdata.com/blog/tag/company-news) - [Cyberattack](https://interbitdata.com/blog/tag/cyberattack) - [Cyberattacks](https://interbitdata.com/blog/tag/cyberattacks) Search - [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) - [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) - [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) - [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) - [Company News](https://interbitdata.com/blog/tag/company-news) - [Cyberattack](https://interbitdata.com/blog/tag/cyberattack) - [Cyberattacks](https://interbitdata.com/blog/tag/cyberattacks) [Business Continuity,](https://interbitdata.com/blog/tag/business-continuity) [IT Challenges,](https://interbitdata.com/blog/tag/it-challenges) [Ransom,](https://interbitdata.com/blog/tag/ransom) [Healthcare Information Systems,](https://interbitdata.com/blog/tag/healthcare-information-systems) [Cybercriminals,](https://interbitdata.com/blog/tag/cybercriminals) [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) # Ransomware: Cybercriminals are adding a new twist to their demands by [Alex Konstantinovsky](https://interbitdata.com/blog/author/alex-konstantinovsky) Dec 13, 2019 #### ZDNet By [Liam Tung](https://www.zdnet.com/meet-the-team/eu/liam-tung/) | December 13, 201 **Pay the ransom or we’ll leak your data is the latest trend, warns cybersecurity company.** Ransomware could be getting even nastier: a security firm is warning over a new trend among some ransomware attackers to not just encrypt data, but steal some of it and use it as leverage to ensure a target pays up.  In several recent cases it has been reported that the ransomware gang [have not just encrypted data](https://www.bleepingcomputer.com/news/security/maze-ransomware-behind-pensacola-cyberattack-1m-ransom-demand/) but also threatened to leak the data, too. Emsisoft says these attacks elevate the ransomware threat “to crisis level” and called on government organizations to immediately improve their security.      “If they do not, it is likely that similar incidents will also result in the extremely sensitive information which governments hold being stolen and leaked,” [the cybersecurity company said](https://blog.emsisoft.com/en/34822/the-state-of-ransomware-in-the-us-report-and-statistics-2019/).  **SEE: **[**A winning strategy for cybersecurity**](http://www.zdnet.com/topic/a-winning-strategy-for-cybersecurity/) **(ZDNet special report) |** [**Download the report as a PDF**](https://www.techrepublic.com/resource-library/whitepapers/a-winning-strategy-for-cybersecurity-free-pdf/?ftag=CMG-01-10aaa1b) **(TechRepublic)** Emsisof said by its calculations that in 2019 across the US, ransomware attacks impacted at least 948 government agencies, educational establishments and healthcare providers at a potential cost in excess of $7.5 billion. The impacted organizations included 103 federal, state and municipal governments and agencies, 759 healthcare providers and 86 universities, colleges and school districts. It said that the impact of ransomware included emergency patients being redirected to other hospitals, medical records made inaccessible and, in some cases, permanently lost, and emergency dispatch centres being forced to rely on printed maps and paper logs to keep track of emergency responders in the field. Company spokesperson Brett Callow told ZDNet: “In the past, the worst-case scenario for governments was data loss. Now, the worst case is data, including the publics’ \[personal information\], being stolen, made public and/or sold to other criminal groups. And that’s a very real possibility, especially given governments’ obvious susceptibility to ransomware attacks. This development has changed the risk landscape.”   These recent attacks aren’t the first time a ransomware group has used the threat of leaking stolen data. In October, a [group called Shadow Kill Hackers held the City of Johannesburg in South Africa’s IT systems to ransom](https://www.zdnet.com/article/city-of-johannesburg-held-for-ransom-by-hacker-gang/) and threatened to publish its stolen data on the internet unless four bitcoins were paid.  The tactic could be becoming more widely adopted in response to [more US cities committing not to pay ransoms](https://www.zdnet.com/article/no-municipality-paid-ransoms-in-coordinated-ransomware-attack-that-hit-texas/), despite city services being crippled by the attacks. The US Conference of Mayors in July adopted a resolution [not to pay any more ransom demands](https://www.zdnet.com/article/us-mayors-group-adopts-resolution-not-to-pay-any-more-ransoms-to-hackers/)to hackers. **SEE:** [**Cybersecurity: This password-stealing hacking campaign is targeting governments around the world**](https://www.zdnet.com/article/cybersecurity-this-password-stealing-hacking-campaign-is-targeting-governments-around-the-world/) Whether the threat of data loss, plus the public exposure of company secrets, really constitutes a crisis is open to debate. But the combination of ransomware and threatening to leak stolen data offers a twist on the age-old cybercrime business of stealing data and selling to whoever pays the most, according to Mikko Hypponen, chief researcher at security firm at F-Secure.    “Stealing data and selling it to the highest bidder has always been good business for criminals,” Hypponen told ZDNet. “Now they’ve realised that often the highest bidder is the owner of the data themselves.” ![maze-ransomware-note.png](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png) Ransomware could be getting even nastier, warn researchers. Emsisoft Tags: [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) [Ransom](https://interbitdata.com/blog/tag/ransom) [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) [Cybercriminals](https://interbitdata.com/blog/tag/cybercriminals) [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) **[Alex Konstantinovsky](https://interbitdata.com/blog/author/alex-konstantinovsky)** Dec 13, 2019 ## Related Articles [![Cybersecurity is Clinical Infrastructure:  Why Hospitals Need a Resilience Strategy](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/iStock-963458566-Jul-28-2026-07-39-32-7419-PM.jpg?width=500&height=500&name=iStock-963458566-Jul-28-2026-07-39-32-7419-PM.jpg) Cybersecurity is Clinical Infrastructure:  Why Hospitals Need a Resilience Strategy](https://interbitdata.com/blog/time-to-reframe-the-shiny-object-in-healthcare-it) [![EHR report distribution: 3 workflow basics for hospital efficiency](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Blog%20Post_EHR%20Report%20Distribution.png?width=500&height=500&name=Blog%20Post_EHR%20Report%20Distribution.png) EHR report distribution: 3 workflow basics for hospital efficiency](https://interbitdata.com/blog/ehr-report-distribution-workflow-basics-for-hospital-efficiency) [![Is Your Hospital ETDBW?](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/patientpath-conversation-1.png?width=500&height=500&name=patientpath-conversation-1.png) Is Your Hospital ETDBW?](https://interbitdata.com/blog/is_your_hospital-etdbw) [![Ponemon: Business continuity management vital for data breach recovery](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/IT-staff-computers-712-1.jpg?width=500&height=500&name=IT-staff-computers-712-1.jpg) Ponemon: Business continuity management vital for data breach recovery](https://interbitdata.com/blog/ponemon-business-continuity-management-vital-for-data-breach-recovery) [![Interbit Data, Inc.](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg)](https://interbitdata.com/) Uptime, Downtime, Anytime! - - Keeping critical information moving securely and reliably for nearly 30 years. [Contact Us](https://interbitdata.com/contact/) [info@interbitdata.com](mailto:info@interbitdata.com) 508.647.0013 207 Union Street, 1st Floor Natick, MA 01760 - [About](https://interbitdata.com/about/team) - [Blog](https://interbitdata.com/blog/) - [Events](https://interbitdata.com/resources/events/) - [Support](https://interbitdata.com/support/) Copyright ©2026 All Rights Reserved. - [Privacy and Cookie Policy](https://interbitdata.com/privacy-cookie-policy/) - [Terms and Conditions](https://interbitdata.com/terms_conditions/) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Alex Konstantinovsky", "url" : "https://interbitdata.com/blog/author/alex-konstantinovsky" }, "dateModified" : "2026-07-28T19:43:13.477Z", "datePublished" : "2019-12-13T08:34:58.000Z", "headline" : "Ransomware: Cybercriminals are adding a new twist to their demands - Interbit Data", "image" : [ "https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Imported_Blog_Media/Yourfilesencrypted-1.png" ], "mainEntityOfPage" : { "@id" : "https://interbitdata.com/blog/ransomware-cybercriminals-are-adding-a-new-twist-to-their-demands", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%20logo%20-%20with%20Reg.png" }, "name" : "Interbit Data" } } ```