I highly doubt Google would pay. There is a 0% chance they prevent the public (and government) from finding out the attack took place, and there is no way to gu

I highly doubt Google would pay. There is a 0% chance they prevent the public (and government) from finding out the attack took place, and there is no way to guarantee the attackers actually delete the data. It is lose-lose for them because of the reputation effects. Unlike the casino or other industries where people don't expect them to be cybersecurity experts nor care to change their behavior anyway.