Such payment was provided not only to prevent exposure of the stolen data but also to secure decryption tool access for compromised systems, according to a statement from ARRL, which noted that while attackers initially sought an “exorbitant” amount for the decryptor, demands significantly dropped after realizing they had no access to valuable information.
Source: SC Magazine