[SES1066]

The only problem with the following advice is if the ransomeware was put on the system awhile ago and remained inactive for a set period of time.
Backup all important files frequently, and store them independently from your system (e.g. in the cloud, on an external drive);

True enough but these SCUM are also plagued by the 'White Hats' that look for fixes that can invalidate an attack scheme. Set a trigger for a year out and the crooks are betting it still working AND waiting a year for the prize. My bet is that 4 weeks is the max logical attack and my backup goes 5 weeks.

Naked HDs are incredibly cheap insurance and if hit I have a chance of taking it to a secure shop for debugging by earlier date parameters. These SCUM need an ongoing income stream, not just a big jackpot once a year.

[Robert DeLong]

I would think that an external drive for a hospital probably is not doable. Especially if they are using a mainframe as a serve to PC’s that are capable of accessing it as needed.