Being hit by ransomware is not an indicator of total IT incompetence. Having no good options but to pay the ransom absolutely is. Part of paying the ransom is

Being hit by ransomware is not an indicator of total IT incompetence. Having no good options but to pay the ransom absolutely is. Part of paying the ransom is the promise that the ransomer will not just unlock your system, but will also delete all the data they downloaded (which often includes a pile of PII that the ransomee doesn't want published).