Attackers Demand $14 Million Ransom From IT Services Firm

Third Party risk, what happens when your vendors cant pay? Business impact? Risk? Disruption?