I've read in some article that insurance companies are actually encouraging the hackers by forcing their insured victims to pay the ransom instead of try to recover on their own or fight back the hackers in any way.
That’s the way it works with liability insurance — if you want the coverage, it’s up to them, not you whether you settle or fight. But one would hope in the insurers are smart enough not to encourage bad behavior.