Ransomware attackers must be handled by law enforcement (domestic attackers) and military (foreign attackers).
If needed, pay for it by taxing and fining the heck out of orgs who get hacked / sell insurance backed by best-practice audits.
If needed, pay for it by taxing and fining the heck out of orgs who get hacked / sell insurance backed by best-practice audits.
Regardless of your answer to that question, you should remember that law enforcement are not there to serve and protect the people, LE are there to serve and protect the system (society and government). Many law enforcement agencies have been sued for failing to protect the citizenry, and their defense is usually that they have no duty to do so.