Nah, most large organizations already have kidnap and ransom policies that pay off in event of extortion. They often also have cyber insurance that covers data

Nah, most large organizations already have kidnap and ransom policies that pay off in event of extortion. They often also have cyber insurance that covers data leaks, but even without cyber insurance the K&R policy often covers costs to recover from ransomware, either by paying the ransom or by replacing/restoring systems.