Are You Keeping the Right Information on Kids?

In the UK, classic ransomware group got a British school and they were trying to demand a ransom. They started posting files about children on the internet as like a proof that they had it saying, you know, pay our payer bills. When you're that level of an institution, it's like how much info do you really need to keep?