That has changed over the past year.  The hackers not only lock up/encrypt the data, they steal it first and blackmail the individual victims whose PII/HII was stolen into paying so that the data is not sold to identity thieves.  Of course, just paying once doesn't stop the blackmail threat from...