Yep.
Two points.
1. There is NO excuse for letting your systems be compromised. If you value it you will protect it (apparently the inverse holds true as well). I worked for a public utility which was covered by NERC. We had 21 days to implement and document that every production machine and device in our environment was patched and tested. Every month. Failure to comply could result in $1,000,000/day fines. We had lots of fire drills but never any fires.
2. Hackers should be hunted down and dismembered - in public. The price for attempted ransomware hits should be death, allowing your rotting corpse to be viewed as a deterrent.