We have seen a few people pay and get their data back. The whole thing is predicated off the fact that the data must be returned if the ransom is paid. If there is a reasonable chance of not getting your data back, then the entire scheme is compromised.

It's in the interest of the hacker to provide decryption and I have heard stories of rogue operators being taken out by other ransomware "firms" for failing to do so.