If they had their backups compromised as well and didn't have any offsite backups then recovery may not have an option. The would have had to rebuild from zero which could be months or years and they may never come back.

The ransomware that the u of u got hit with a couple of years ago was also paid but they had student data and they were threatening to release it.