A short industry item on ransomware cost framing is a reminder that extortion risk is often measured in business disruption, not just in the ransom demand.