I have a strong suspicion that the 3 letter agencies are tied to ransomware attacks, since they don't seem to be doing anything about it. And it is a nice way to raise $$.
I'd also bet that any groups arrested for ransomware attacks are competition to the clown agencies.
That's almost always a giveaway. Someone smart enough to breach corporate security (yeah, some companies are easy to hack, but not all), leaves part of their home address in the code. Especially with all the code and language converters available online.