The hackers then asked for $20 million in a ransom payment to delete the data.