Cybercrime has developed with fairly opportunistic attackers who do not want to waste too much time. Attacks targeted CAC 40 companies; now, it is more mid-sized companies (ETI) and SMEs because the level of security is quite low and uneven.
All targets make data backups. To secure them, you must disconnect them from the Internet and put them aside so that they are protected. If this is not done correctly, attackers can very well block the system and, with it, take over all the data.