To clarify my point, even if leeching off companies is like stealing a grain of rice from each person, it is still wrong.

My point was that ransomware is wrong even in an idealized abstract scenario where it only targets non-critical companies.

Thanks for providing your experience. It drive home that in practice it is much more like beating and robbing many people than it is like stealing just a single grain of rice from them.