Data exfil is a lot easier to be prosecuted for than fucking up the backups or database, since you can reasonably make the argument that it was an accident.

Though, any company worth their salt has off-site/offline backups, so it will be rather hard to do any lasting damage in a plausibly deniable manner.