Legal risks of paying ransom following a ransomware attack need to be clarified, as such attacks are constantly increasing and victims always face the same dilemma : whether to pay the ransom or not ? Insurability of ransomware needs also to be clarified, as some cyber insurance companies offer to cover the risk of ransomware without knowing whether such clauses are really insurable. This clarification is all the more necessary as it will encourage stakeholders (victims, financial intermediaries and insurers) to act and report to the authorities, which should strengthen the fight against cyberattacks.