It’s been tried. Laws against paying just make people not report to the police at all.

well, i guess laws against murder, makes murder no report them self...

> laws against murder, makes murder no report them self

One of these is more universally repulsive than the other. Were it illegal, I'm not sure I could be bothered to blow a whistle on a company paying a cyberransom. That's obviously different for murder.

The analogy is closer to being: the state will prosecute the murder victim's family for failing to properly protect them AND won't be able to locate or punish the true murderer. So in this situation, what's the family going to do? Mourn in private and not report the crime, maybe try for vigilante justice if they think they've identified the murderer.

And not let the community know there is a threat out there.

In this scenario. the community is a danger to the family.

Reporting the murder will see the community punish the family for not protecting the person better.

Then you toss the entire executive branch in prison when it inevitably leaks. The problem will solve itself soon enough. These criminal organizations should be treated as such.

Hah the LockBit negotiator displays that childish " I'm going to make something up and be convinced it's true" mentality that's much too common nowadays..

> LockBit refused to accept the explanation and accused the company’s negotiator of “bluffing”, speculating that the company’s directors probably held £100m of cryptocurrency personally that could “finish this nightmare”.

"I have the ability to punish you for my fantasy not being true" isn't childish, it's common among adults, and, indeed, is a defining feature among the adults who abuse children and anyone else less powerful than them. It is, in fact, one of the most powerful tools a dictator has: "You failed to capture that objective? You are incompetent, and possibly traitorous, so you will be executed, your family will be executed, and I will continue this war with competent generals who execute my plans because my plans are viable."

If an organization pays a ransom, I consider that organization to be effectively in league with the criminals, and avoid doing any business with them in the future.