Identifying the hackers and arresting them can be difficult. Ransoms are paid using hard-to-trace digital currency.