I recall reading an article on HN the other day which revealed there's even an insurance policy against ransom kidnappings, and that there are companies specializing in dealing with them - particularly, in business settings, they'd pay off the kidnappers and then bill your company for "consulting" (this is so that your company doesn't look like it's supporting organized crime by paying ransom).