With ransomware attacks on the rise all over the world, regulators are keeping a close eye on the reimbursement of ransoms by insurers. Given the evolving hackers behaviors and the uncertain nature of ransomwares refunds by insurers, causal approach seems to be adequate to model the financial losses an organization may suffer due to a ransomware attack. The modelling framework includes the ransom’s reimbursement and the company’s IT hygiene.