The Amsterdam cybercrime police team has arrested three men for ransomware activity that generated €2.5 million from extorting small and large organizations in multiple countries. All three members were between the ages of 18 and 21. Victims include online shops, software firms, social media companies, and institutions connected to critical infrastructure and services. The actors would demand a ransom from the companies in exchange for not leaking sensitive data they were able to steal during the attack, but in most cases, the group would still leak the data even if the company paid the ransom.