Mr. Pat Larkin:

In our experience, when the ransom is paid, they give the keys. The keys, as we see from what is going on in the Health Service at the moment, are just the beginning of a journey of pain to recover data and systems. It is not necessarily always instantaneous to recover those. The ransomware business model, in general, depends on the ransomware providers doing what they say they will do. It is a business model, in inverted terms. Therefore, if they do not release the systems, they do not get paid. The model usually is that they do what they say they will do, because if they do not, then they do not have a business model.