Ransomware attackers often strike targets twice, regardless of whether the ransom was paid.