Since TDO business model is simply extortion, I have little confidence that legitimate proof of criminality of consequence will be forthcoming. Were such evidence in hand it would be so hot as to burn any hands that touched it. We're talking about treason, mass murder, and various crimes against humanity by some of the most powerful (by definition, if this proof exists) mobsters and thugs in the world, with access to the best funded and, arguably, most competent state level cyberintelligence agencies in the world.
The payout for this risk is less than $3M.
That's not enough to employ nominal security protocols to counter the threat, IMHO. Perhaps TDO is 733T H4x0RZ enough to be confident in their security.
I find it far more likely that they know they aren't at significant risk of such threats because they are not in possession of any such incriminating evidence, beyond the damning evidence you have already cited, which is basically just lying about taking security measures and making up a bullshit story to heroize the dead. Not too liable to produce significant outrage or make actual heads roll, if quite alarming and actually criminal.
Such significant incrimination as might potentiate indictments for treason and crimes against humanity would only be safe to simply anonymously release IMHO. Using it for extortion purposes is poking uncaged, hungry, murderous bears with short, pointy, twigs,while naked, smeared with blood, and having both legs broken, and I consider that so unwise as to preclude extortion.
Thanks!