> I'd be shocked if they ever admit it was ransomware.

Won't they have to since they will need to report it for shareholders?