The threat of double-extortion is real, but with ransomware attacks there has always been the threat [that] cybercriminal attackers will leak the data exfiltrated from the victim, so I don’t see that threat as really new.
Gone are the days when you could be a victim of a cyber-attack, either pay the ransom or restore your systems and not disclose the attack. Reporting requirements and future legislation will dictate transparency and disclosure.