Imagine making it illegal to hand over your wallet to a mugger holding a gun to you.
All you are doing is incentivizing companies to not report these attacks.
All you are doing is incentivizing companies to not report these attacks.
Furthermore, a corporation's bottom line is not truly comparable to a human life. However it is my understanding that paying ransoms to save human lives is technically illegal to. If paying a ransom to save your family member's life is illegal, then corporations paying ransoms to protect their finances should certainly be illegal.
You are wrong.