Triple extortion

A double extortion attack where a threat actor goes on to directly threaten individuals whose personal data has been stolen. It diversifies the revenue of criminals by demanding a ransom to the victim(s) whose data is found in the exfiltrated data.