> However, the company just left it at that, failing to analyse how cyber criminals infiltrated the network – something that came back to haunt them when the sa

> However, the company just left it at that, failing to analyse how cyber criminals infiltrated the network – something that came back to haunt them when the same ransomware gang infected the network with the same ransomware less than two weeks later. The company ended up paying a ransom a second time. Either they should have fixed the flaw _or_ included a specific clause with their multi-million payment to state "the [insert bad guys company here] will not repeat this bad behaviour"