The group claimed 3.65 TB across ~8,800 institutions, defaced hundreds of login portals, then settled. The proof of deletion was a log file it wrote itself.
These are not poor institutions. The money exists and does not flow to the systems that hold the people.