Practically, this is how all these ransomwares work in big organisations...

It's usually ~$1000 per machine. Sometimes more for machines with big disks or depending on which active directory groups they're in.

That tells you that UCSF paid for data recovery on 1000+ machines probably...