I just finished listening to an episode of https://darknetdiaries.com/ about governments being compromised by ransomware recently (Dominican Republic), but the analysis pointed to the Russian government potentially being directly responsible and might be part of a larger campaign. Now another major infrastructure attack. Good episode, but concerning.