Ok, time to dust off recovery protocols and try to convince clients that given the ease of automation, it's not if but when they get their first cyber attack. Despite their usually smaller size, the economics of targeting them in some broad yet tailored campaign stopped being a good defence. Safety among many is no longer a viable option out there. Looking forward to many accusations of how we try to wring every last cent out of them. Sigh. Road to hell and all that.