[from]

There is generally no criminal prosecution for paying ransoms. There might be if the ransomware group is sanctioned but that would true regardless of payment method. If a public company paid a ransom via cash or by buying a bunch of bitcoin through an exchange they would still have to make the same 8-K filings and accounting changes etc.