Does the test database contain sensitive data? If not, you can ignore the ransom.