The victim firm in the ransomware attack had paid $950,000 in bitcoin to the perpetrator through an insurance company. Much of it ended up on Bitfinex.
Source: https://www.coindesk.com/british-court-freezes-860000-in-bitcoin-linked-to-ransomware-payout
