In order for a ransomware attack to do this level of damage there are several layers of problems

1. They were not properly prepared to prevent the ransomware attack
2. They lacked either the experience or expertise to mitigate it and contain it once the attack started
3. They don’t have an existing backup of any of the data lost