this doesn't appear to be a ransomware attack, just plain old blackmail. Insecure backups would actually make it worse...