Ransomware crook's email provider shuts down account, so now no one can pay their ransom

two words: server logs.