Ransomware attacks rarely indicate any data leakage; all they usually do is prevent you from accessing your own data (by encrypting your drive with a key you don't have access to).
These days attacks labeled “ransomware” in the news seem to be hybrid attacks. There usually is sensitive data exfiltration in addition to encrypt-in-place.