Guessing they're not competent enough to purge their email systems of the original malware attachments nor have procedures sufficient to keep new computers from

Guessing they're not competent enough to purge their email systems of the original malware attachments nor have procedures sufficient to keep new computers from being re-encrypted. New email domain means old emails aren't accessible.