That's what Garmin ended up doing. The group had sanctions, so they had to pay a British company.

https://www.theverge.com/2020/8/4/21353842/garmin-ransomware...