Older equipment running custom apps on OS that are no longer supported, lack of external protection... It’s pretty easy if IT doesn’t or isn’t allowed to keep all systems up to date or have adequate backups.
See my above post - you’d be shocked at the number of people out there in positions of leadership that won’t spend to keep systems updated and then go shocked Pikachu when their decision to get a $100K company Mercedes S-class instead of upgrading the Cisco firewall appliances and putting everything on a real VPN backfires.
Respectfully - I’m well aware of the status quo regarding cyber security....think your connected car is secure? Would you like me to remotely activate your airbags? I more than get that every other feature gets the bulk of the development budget and security suffers due to it.
That said...”ransomware” is an easy excuse and the lack of urgency shown by this admin is absurd. If true - I’m more likely to believe it is our OWN government vs. some shady dark web team.