The federal government for years has recommended that companies do not pay criminals during ransomware attacks, but the feds have a consolation for those who do pay: the ransoms may be tax deductible.
Why it matters: The IRS offers no formal guidance on ransomware payments. But multiple tax experts interviewed by AP said deductions are usually allowed under law and established guidance.
