I'm glad they didn't pay and it's the right thing to do. I feel for them.

For those who do not know, being compromised by a hacker is a when not if for ever major business in operations. I don't care how well you do security, all it takes is one social engineering attack or one zero day and blamo your compromised.

Source: I'm a cybersecurity professional