# Should we pay the ransom?

That is a business and legal decision, and law-enforcement agencies advise against paying: it funds the attackers, does not guarantee that the files come back or that stolen data is deleted, and paying a sanctioned group can be illegal. Decide with your incident-response provider, your insurer and your lawyers, and report the incident to the police and, where it applies, to your CSIRT. NetSenX does not negotiate or restore data; it helps you see earlier what the attackers did on the network.

FAQ: [Incident response](https://netsenx.com/en/faq/incident) · https://netsenx.com/en/faq/should-we-pay-the-ransom

## Read next

- https://netsenx.com/en/detect-ransomware-on-the-network
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [Should we pay a ransom if the attackers say they copied our data?](https://netsenx.com/en/faq/should-we-pay-if-attackers-say-they-copied-our-data)
- [What is a ransomware negotiator, and should we use one?](https://netsenx.com/en/faq/what-is-a-ransomware-negotiator)
- [How do we find out what data was stolen?](https://netsenx.com/en/faq/how-do-we-know-what-data-was-stolen)
- [How can we check whether ransomware attackers really stole our data?](https://netsenx.com/en/faq/how-to-check-whether-attackers-really-stole-our-data)
- [Our data is on a leak site. Can we find out when it was stolen?](https://netsenx.com/en/faq/our-data-is-on-a-leak-site-when-was-it-stolen)