PGP is not the only solution, therein lies the answer

Prosecuting the people that do this is also a way of helping with the problem, acting like a coward and paying extortion money only makes you an easier target