Sensitive data is also exfiltrated if a multiple-extortion ransomware attack is carried out, which is never known for sure. Data availability is lost due to encryption, even if no exfiltration takes place. Some ransomware variations may alter personal data without authorization.