Many people who get ransomwared are naive victims of phishing emails, some of which are fairly convincing. There are usually some red flags if you're paying attention, but it only takes one mistake.