They claimed to have had insurance coverage.

I hope they learned their lesson here. Defense against a ramsomware attack is simple: backups. After the attack, simply wipe all your systems and restore from backups, and then tell the hackers to go fuck themselves.