Insurance and Ransomware: “insurance industry incents companies to do the cheapest mitigation possible. Often, that’s paying the ransom.”