This particular attack is unfortunate because it was for ransomware, and while CDK did not disclose if they actually paid a fee, chances are they did, and we may never know the size of the fee, how it was paid, or whatever, but at that much risk,