We’ve been hit by this.
********************************************
A relative’s business was down a week due to ransomware. It also got into some of the backups (not all). An IT company was checking out a work station, took off the security the company was using & put their own on to test ... took theirs off & did not put the company’s back on. That is how the bad stuff got in. To make matters worse, the culprit IT company was slow to respond - another was called & responded immediately so they are the new IT guys (helped me with an issue too - very good). A week down, when the computers are used all day, every day, cost the company a lot of money.
I bet they lost $$$. Ugh.