Call it a learning experience. After the attack, they'll make a loooong list of everything they should have done. Then they can cover ransomware again, for companys that show in an audit they implemented axa's list.
the biggest irony of all: AXA was a major financial backer of Blockstream, a bitcoin development company which employed (still employs?) several of the bitcoin core developers.