Kind of obvious really... consumers can move on from a ransomware account without that much pain other than the emotional aspect of losing family pictures, etc. and often don't have lots of disposable cash to gamble with the chance of it not getting back. Whereas a business infected with ransomware could go completely out of business, and they are going to be more willing to gamble on giving them money to get it back because if they don't get the encryption keys they are going out of business anyway.