By the way, having dealt with both monitoring human operated ransomware and dealing with it first hand, my experience is recovering, even if you pay, is around a 2 month ordeal on average.

It can stretch to 6 months or more before operations are fully restored.

You’ll frequently find IT and security people quit after recovery as the mental health toll is large - they never want to go through something like they again.

You basically go from having a day job in IT to being an IT open heart surgeon trying to save an entire company full time for months in the middle of the chaos of a war zone, where every outcome is hindered by decades of poor business investment.

Which is then covered up for the public with legal privilege and NDAs, so nobody knows how things work, ‘cos you gotta protect shareholder value most important of all.