Actually there is lots of doubt
The ransomware groups hit lots of companies. Their reputation for holding up their side of the bargain is how they get paid. So they tend to keep their side of the deal.
The ransomware groups hit lots of companies. Their reputation for holding up their side of the bargain is how they get paid. So they tend to keep their side of the deal.
The money is better spent improving security. Them spending money with hackers won't stop GDPR from ripping them new asshole either.
Wrong. The "return" is pointing a bigger target on your back because now future attackers know it is worth it to attack you.
As for the backups, the groups running ransomware are very aware of the importance of backups. Therefore they have developed best practices targeting the backup systems in a variety of ways. If the backups are online, delete them. If the backups are offline, compromise the backup server so it stops taking backups, leave that for a while, then do your attack. (You'd be shocked at how many companies don't test backups regularly...) If whole computers are backed up, insert a malware timebomb - as soon as the computer realizes the date, it destroys itself. When it is restored from backup, the backup also destroys itself.
Most companies pay too little attention to backups. And therefore highly motivated attackers regularly succeed in attacking them.