[anon373839]

Policy is quite far from that: ransoms are even tax deductible.

[bklyn11201]

Are there no legal consequences for knowingly paying money to a known criminal group based in Russia? What about the existing OFAC sanctions?

[sidewndr46]

I don't really think companies do KYC on ransomware groups. The government just does not prosecute it.

[petre]

Hiring bounty hunters to hunt down the perpetrators should also be tax deductible then.