Total speculation, my guess is WastedLocker. It has been hitting all types of companies in the past few months. Have a friend who's company was hit recently. They were somehow were able to encrypt the backups.
Or shudder far reaching writeable network mounts.
The link was updated more than 2 hours before your comment to a zdnet article that even mentions a WastedLocker variant.