Companies are becoming victims of ransomware attacks more and more often. The attackers gain access to company data, encrypt it and demand a ransom. It is often no longer just a matter of getting back to business-critical data, but also of avoiding that confidential information is published. A significant damage to image and often a fine according to DSGVO are the consequences of such a data breach. No wonder many companies are wondering if they should pay the ransom for their data? What are the risks and what would companies have to make public? This lecture addresses moral, technical and legal issues and explains the connections to the so called cyberwar.