Comment by ragall

Quite likely the opposite: a few weeks ago a ransomware attack halted ~100 hospitals' management systems in Romania, and the cybercrime defense unit just disconnected all hospitals and had the local admins rebuild from backups and paper trails. So I'm quite sure that all public administration IT admins have been running drills and probably have up-to-date backups.