Expenses and losses related to 'kidnapping for ransom' are tax deductible [1], so it stands to reason that ransomware payments are also tax deductible.

[1] https://www.irs.gov/publications/p547#en_US_2020_publink1000...