Cheapskates wouldn't pay for security help, got hit by ransomware, and went bust months later

This column recounts two incidents: a small construction company was crippled by ransomware that encrypted its server and attached backup, ultimately contributing to the business closing; and a separate phishing/MITM campaign leveraged a compromised executive email to harvest Microsoft 365 credentials and 2FA codes—an intrusion that was cut short by detection software using Entra ID telemetry. The piece emphasizes the need for off-site/cloud backups, timely patching, and phishing-resistant MFA (e.g., hardware keys or passkeys).