Not necessarily. A ransomware attack is just a subclass of your generic security breach, so the usual response & remediation activities apply. I would actually

Not necessarily. A ransomware attack is just a subclass of your generic security breach, so the usual response & remediation activities apply. I would actually think covertly paying ransom costs being a highly unlikely activity.