The victim firm in the ransomware attack had paid $950,000 in bitcoin to the perpetrator through an insurance company. Much of it ended up on Bitfinex.