Attackers are not only demanding ransom from organizations, but also threatening their customers, users and other third parties.
Source: techrepublic.com