9. UC San Francisco paid bigger

In June, the University of California, San Francisco, paid out $1.1 million to its attackers, one of the largest ransomware sums on record in the public sector. The agreement came after a lengthy negotiation process and a starting demand of $3 million. The attack, which was initially detected on June 1 at the University’s School of Medicine, did not disrupt the school’s research on the novel coronavirus, its patient-care system or the campus’ network, school leadership said, but it wind up representing yet another victory for the operators of the NetWalker virus.