I've a suspicion the victim here runs their IT support business out of a residential address, and it occurs to that introduces a whole new layer of risk when it comes ransomware operators.
If they get into your network, and it's basically a *home* network, they're not just going to be getting your business data, but potentially your - and your family's - personal data as well.
