Victims of ransomware attacks deal with complex circumstances when considering whether to pay criminals the money they seek.