I am working with a client that is a small $ 60 M portion of a larger conglomerate; their organization uses the IT Division that is shared by many other companies. They in turn have moved their data off site to a Data Center. In October, my client was hit with Crypto Type Malware, and were without their business applications (Sage, Manufacturing, CRM, Email, VOIP) for 6-business days. Although I don't know all the details (they did not involve me); I understand they payed the ransom.