Thanks for the down vote!

Yes doxing employees is bad. But if you pay the ransom, there’s no guarantee they’re not going to doxx / sell the information anyway. Or come back again in 6 months or a year and ask for another payment.