Company infected with Ryuk ransomware

[bazookaman]

I powered it up at home and ran our corporate malwarebytes on it before turning on wifi and it found nada. we're pretty sure it was an employee who clicked an attachment or something along those lines. Our SysAdmin had just sent out an email earlier this week saying that we were being phished hard and to NOT click on anything. Apparently someone did.