Criminals send ransom demands not only to the attacked organization but to any customers, users or other third parties that would be hurt by the leaked data.
Source: techrepublic.com