[tengbretson]

Unless you're arguing that the attacker is a shareholder I don't see how paying out money to them wouldn't just be seen as a loss.