it is. depends on jurisdiction, but if the ransoming organization is a sanctioned entity, it may be considered an illegal sanctions violation. for instance, t

it is. depends on jurisdiction, but if the ransoming organization is a sanctioned entity, it may be considered an illegal sanctions violation. for instance, the US OFAC has issued this statement warning companies to not pay ransoms: https://home.treasury.gov/system/files/126/ofac_ransomware_advisory_10012020_1.pdf https://home.treasury.gov/system/files/126/ofac_ransomware_a... royal mail is in the UK, but the UK has its own sanctions regime with similar penalties. edit: the UK OFSI has issued a similar warning this month https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/1135587/Ransomware___Sanctions_guidance__Feb_2023_.pdf https://assets.publishing.service.gov.uk/government/uploads/...