Perhaps you could say they are ransoming the exclusive ownership of the data. But yes, 'blackmail' seems like a better fit.