Have you reported this to authorities? I'm not familiar with any specifics, but hopefully there is somebody out there - either law enforcement or white hat hackers - who is compiling and maintaining a list of addresses like this to be monitored on an ongoing basis. I'd suggest looking into that.

The coins has been moved to another address 

I just we all need to backup our important data/files in case we accidentally got hit by these ransomwares...

Perhaps you can report the ransomware incident to Blockhain crime experts like Elliptic but if the theft was really for just $600 I don't think it will be worth it because whoever is going to investigate this will ask for more money than that in fees probably. The business owners should still report it to the police though even if it was an extortion for a small amount of money.

That is really bad and I don't condone online extortions but I think the police won't catch these criminals because $600 is too small of a sum for them to initiate any serious investigation. Maybe if some Bitcoin vigilantes help you track the transaction back to the criminals you could possibly locate their whereabouts but this is a really difficult task to do.

I know a small business owner that didn't pay the ransom. The hackers only gave them 48h to send 1BTC which at the time was worth about $300CAD. They didn't send any for 2 reasons: they didn't have any Bitcoins couldn't get any and they had heard from others that had paid that their files were never released anyways. Hopefully these people slop up at some point.

The media just highlights these events because it has something to do with Bitcoin. Before Bitcoin these people used wire transfers and other payment methods and it hardly made the news. Also be aware that people can post any address on the internet and claim it has had something to do with crime. If they do not post evidence showing that the criminal asked for funds being send to that address, it is still just a normal Bitcoin address.

If this is a real address linked to Ransomware, it would serve no purpose. These people push those coins through anonymous mixer services and you will not be able to follow it. In some countries you might be able to subpoena these services to give up the information, but the chances of success is very slim. 

Coindesk has an article today that may be very relevant for the OP:

http://www.coindesk.com/anthony-murgios-lawyer-argues-for-change-of-law-during-regulatory-panel/