At least for US-based victims, in many cases it is illegal[0] for them to pay -- and the feds have been pointing this out to both victims and incident response

At least for US-based victims, in many cases it is illegal[0] for them to pay -- and the feds have been pointing this out to both victims and incident response firms for the last few years. 0 - https://home.treasury.gov/system/files/126/ofac_ransomware_advisory_10012020_1.pdf https://home.treasury.gov/system/files/126/ofac_ransomware_a...