They did pay. "The first attack was tied to a ransom of 15 bitcoins (roughly US$6,000) which ProtonMail eventually paid due to pressure from ISPs and other companies affected by the attack." https://en.wikipedia.org/wiki/ProtonMail#2015_DDoS_attacks