Pay the ransom and nobody gets hurt. It's actually tiny price to pay compared to proper infrastructure. Insurers make trillions, it's nothing to them.

The happy ending of this would be continuing to pay terrorists who keep you IT top notch...