There's been some debate, but I think we're confirmed now: No org should ever pay any ransom ever again.

https://www.ctvnews.ca/toronto/article/student-info-stolen-in-powerschool-data-breach-not-deleted-despite-ransom-being-paid-tdsb/

Student info stolen in PowerSchool data breach not deleted despite ransom being paid: TDSB

The personal information of students stolen during a data breach in December has not been deleted even after a ransom was paid, the Toronto District School Board said.

CTVNews