It's also worth noting that if you pay ransomware, the organization you pay now knows that you (1) are willing to pay, (2) don't have the technical capability to avoid a malware infection, (3) don't have a full backup solution.

Even if the ransomware is removed/disabled after payment, you are more likely to be re-targeted either by the same group or that group may resell your information to rival ransomware groups.

I'm not entirely against paying, but it's a risk calculation and you should know all of the risks.