I work for a state agency and someone put ransomeware on some of the network drives a few months ago.  The funny thing about it was that the perpetrators only wanted something like 0.75 bitcoins.  The agency did not pay the ransom.  They have all the data backed up every night, so they just reloaded the previous day's data and we just lost part of a day's worth of work.