This blog post from Britain’s National Cyber Security Centre discusses why, when it comes to a ransomware attack, it’s critical to treat the cause, not just the symptoms.
A victim of a ransomware attack paid cyber criminals millions to restore their data. They were attacked by the same hackers again soon after because they failed to lock down the vulnerability that allowed the attack to happen in the first place.