If an organization pays a ransom, I consider that organization to be effectively in league with the criminals, and avoid doing any business with them in the future.