If a ransom-ware attack was to happen which threatened to make public "private client data" if you didn't pay up.
Assuming such a virus exists and you've already been infected, how do you protect your clients confidential data without paying?
As companies are now sidestepping ransom-ware attacks by simply using good backups to restore copies of files, I believe the next logical evolutionary step would be for ransom-ware attacks to threaten to reveal confidential client data, where backups will be useless as a defense.
Also, as far as I understand, no security measure if 100% perfect to attacks, and that you can only reduce your chances of being attacked in the first place. Therefore, in the inevitable scenario that you do get ransom-ware, how do yo protect client data confidentially?