Ransomware isn’t always debilitating. We got hit by an attack a few years back and realized no one had anything relevant on that machine anymore so we just wiped it clean and moved on.
Many times data is exfiltrated beforehand, backups are deleted. If someone went the trouble of compromising a 3rd party software vendor, he knows what he is doing.