Ransomware attacks are different than plain blackmails, because typically there is no wrongdoing from the victim. It's just that they run some software that encrypted their data and then can't access it until they get the decryption key (by paying the ransom). If you had a hospital or another type of private or public organization saying "Mr. Hacker, we can't pay you, we are prohibited by law to do so", then the hacker wouldn't even bother.