Nobody seems to be mentioning how the data is potentially more valuable then the ransom? If customer data is stored on their servers, the hacker potentially has the historical location data and identities of a lot of their customers now, which could potentially contain sensitive information of important people and possibly valuable to state actors