comment or give a opinion on this discussion answer below?

Margaret Towell

answer:

No I would not pay the ransom, it is technically illegal to do so. Criminals only interested in the money, and if that way to get that money would quickly lead to companies exploring other options to deal with ransomware and, criminals moving toward some other endeavor with an easier payout. The payment of ransom demands seem appealing at first, until you really think of the idea and how it would work in practice. Trade companies have a legal duty to the shareholders and the public service companies have legally binding commitments that serve their communities. A law that threatened to fine organizations would be controversial in principle and likely difficult to enforce in practice, from the ethics of criminalizing the victim of a crime whose whole intent is to real that victim into making a payment. Handling the media of course would be to assure the community that we are making every effort to make sure their personal information is safe. We will do everything we can to protect the safety of the patients information. Law enforcements, FBI, IT security all our management team would be notified. As soon as I received the call it's all hands n deck and every employee needs to do their part in doing what they need to do to keep the company safe. In the real world you can put that into play because you always need a plan for everything and have several moving parts to have that plan run smoothly.

references:

https://www.sentinelone.com/blog/ransomware-to-pay-or-not-to-pay-lets-discuss/