But the attackers have a free market incentive to delete the data. Cause if they were found to not be deleting it then future victims would not pay the ransom.