We do want people to be very clear that they should not pay ransoms when ransomware is put on to a computer network. We know that those that do pay ransoms may well expose themselves to future attacks because they show then a vulnerability and a willingness to cooperate with criminals. They're likely to find their systems may be targeted again, and there's no guarantee in any case that they'll get their data back if they pay a ransom. 