A ransomware attack on a school usually runs in three stages. An attacker gets in quietly, moves through the network for several days, then encrypts servers and steals data before demanding payment. Dwell time is typically four to six days, which is long enough to find your backups and short [...]