"Cybercriminals are increasingly finding that data extortion attacks are easier and more profitable than ransomware, which led to a shift in behavior by many threat actors in 2022, CrowdStrike’s threat intelligence head told CRN. The number of threat actors that carried out data theft and extortion attacks, without deployment of ransomware, grew by 20 percent in 2022, according to the cybersecurity vendor..." https://www.crn.com/news/security/c...itching-ransomware-to-focus-on-data-extortion
Sounds like a good candidate for baiting them with a zip bomb and naming it "confidential finances" or something.