This is pretty unbelievable. 

A million can buy a lot of things, and for less than that, the hosting company could have protected its systems or invested in backups.

By paying ransom, it opens the doors for more attackers to try their luck - and there's no telling where the money is going, or what it will fund in the future.