This is why paying the ransom should carry the same sentence as the original hack itself.