The proper way to handle this would be for companies to form a coalition or be insured, with the requirement that all members refuse to pay ransoms, so that they can refuse any ransom demands and be covered on repairing the damage. Then the only incentive for these attacks would be destruction, but not money.