précis: Shadow Volume files are left after removing the encrypted files. POtentially allowing users to recover _some_ of the lost data.