"unable to pay" is not the same as "should be illegal" The perps don't give a shit about what is legal and illegal. They target preys that are vulnerable but h

"unable to pay" is not the same as "should be illegal" The perps don't give a shit about what is legal and illegal. They target preys that are vulnerable but have critical functions (e.g. a Hospital network). It is not just about individuals. If a Hospital Network gets attacked and has serious consequences, they won't do a board meeting to discuss "Gee, paying ransomware is illegal. We must say No. ". I am not advocating that people should just pay but we cannot punish the victims even if the victims were careless (bad security practice etc).