How do you think that hackers can blackmail companies?

hackers may blackmail companies by going through the companies database and finding hidden bad infomation about other issuesor things then saying "if you dont give me some of your money i will tell the police about ............ "