Sort:  

If they are not prepared, they will likely struggle to get services restored and data recovered. It is not pretty, but giving into the threats is a far worse proposition.