No. Rumor & innuendo suggests that Garmin's insurance policy might have paid the ransom, but obviously we don't have any means to verify that. If those rumors are true, I think Garmin can legally say they did not pay, but that the insurance company did. As long as Garmin did not request for the insurer to pay the ransom, I think that might insulate them from any penalty.

The truth is, we'll probably never find out the whole story.