Ransomware groups have changed their approach and now routinely steal the data before encrypting it. They then offer two tiers of payment: pay X and they won't leak the data or opt for the premium plan and get the key to decrypt the data.