I've heard of attackers breaking into misconfigured firewalls and causing a denial of service until the victim paid a ransom.
I'm sure if either one happened to a business, they would be forced to pay the ransom, since a company can't just stop working.
Thanks for the heads up.
