80% of orgs that paid the ransom were hit again
https://venturebeat.com/2021/06/16/cybereason-80-of-orgs-that-paid-the-ransom-were-hit-again/
I'm skeptical of it being the same actors. Their continued business is reliant on then sticking to their word otherwise why would anyone pay them? It's mostly just orgs don't patch the issues that allowed them to be compromised in the first place.