work got ransomware'd this saturday https://www.bleepingcomputer.com/news/security/tietoevry-ransomware-attack-causes-outages-for-swedish-firms-cities/

today we got a mass invite to a different azure tenant and they had to go into teams and tell people that "this email is actually genuine and not phishing or anything"