Again, $6k is reasonable price even for small company.
Imagine you run internet-based business and got ddosed. You have to choose risking losing lots of current and potential clients as well as trust in your business (potentially you could even face a lawsuit, if it caused loss to any of your clients). Or you could just pay $6k and buy yourself enough time to come up with proper protection, so this won't happen again. What do you do?
Daily reminder, even FBI acknowledged that paying ransom is often the best option:
http://www.coindesk.com/fbi-malware-victims-should-pay-bitcoin-ransoms/Isn't it that making a deal with those attackers will just open the doors to those with criminal minds that it's now possible to commit this kind of crime and gets out of it undetectable. $6k is small price to pay but it's not a guarantee that they will not attack again and maybe next time they attack they upgraded to a more destructive way of attacking sites using the $6K ransom.