Personally I think the UK is going to be one to watch now, as if I was an e-crime threat actor - I’d zero in on the UK.
Orgs have shown they will pay, teens getting in and poor MSPs shows poor security practices, the NCA won’t tell the ICO (data regulator) too around what actually happened, and the government will bail out orgs financially and provide IR help while they recover.
It’s all of the wrong messages being broadcast. Strap in.