A recent cyber incident has highlighted the difficult decisions organisations face when sensitive data is stolen. While paying a ransom may seem like the quickest way to resolve an attack, there is no guarantee that cybercriminals will delete stolen information or stop further extortion. This article explores the risks of ransomware payments and why preparation remains the best defence.