Some businesses might think about paying the ransom, but most safety experts say they shouldn't. Paying doesn't ensure that the data will be recovered, and it may even lead to more attacks. Instead, companies should focus on their incident recovery steps, which include getting data back from backups, analyzing the ransomware threat, and making security stronger to stop future hacks.