The aggregate dollar value of ransoms that criminals have successfully collected from victims shows an alarming trend. The city of Atlanta spent almost $5 million just in procuring emergency IT services following a March 2018 ransomware attack that crippled essential city services for days. Organizations must recognize that the cost of a ransomware attack goes far beyond the extortion payment. Ransomware gangs copied the model of tech vendors such as Salesforce.com, continually developing and improving their product and relying on a network of internet-based “distributors” to get their product into the marketplace.”]
Source: https://www.govinfosecurity.com/blogs/ransomware-risk-management-11-essential-steps-p-2841