[makeitdouble]

> The only reason these persist

You make it sound like a simplistic game with set rules. There will be myriads of other reasons to breach companies, and even strictly sticking to the money part, doing ransom/extortion can have secondary and tertiary effects worth enough to do it even if the ransom fails.

If you look at it as a market, the victim is only one actor among many.