I don't claim to know how randomsares work but that's what the second attack has been reported as, at least.
Yeah, DDoS attacks are also commonly called "hacking" in the media, but the truth is, anyone with a (stolen) credit card can rent out a botnet with no technical skills (or hacking) required.
In this case, what has been reported is that the group has asked Sony for money, or alternatively they'd sell the data online to the highest bidder. Which would be a ransom, yes. But actual ransom
ware would be encrypting data on Sony's servers, and thus far what I've been able to parse about the MOVEit vulnerability, it doesn't allow remote
system access to vulnerable systems, at least with sufficient privileges. The vulnerability does/did (I sure hope those affected will have updated their systems by now) allow unauthorized remote access to certain files though.