Data leaks are not thefts
"it got a copy of the information with a promise from the crooks"
And if there's one thing you can count on, it's a promise from crooks.
I can't fathom why people still treat data leaks as if they're like theft of something physical. You can't "retrieve" your data. It's gone. It's out there, anywhere. And unless the crooks deleted your copy when they took it, and you have no backups, "retrieving" the data is a totally pointless operation, other than as proof they have it, and still have it. Which is not something you need to pay for. The crooks are happy to send you as many copies of the data as you need to prove they have it.