“After days of tense negotiation and brinkmanship, ARRL agreed to pay a $1 million ransom. That payment, along with the cost of restoration, has been largely covered by our insurance policy.”
ARRL paid $1 million for a decryptor after a May attack, and its filing in Maine said only 150 employees had data exposed. The league complains the attackers assumed it had insurance big enough for a multi-million-dollar demand. It did have insurance, and the insurer paid. Every covered payout tells the next gang which nonprofits to hit.