Maybe big tech shops did ok but smaller business for whom IT was just an expense, they tried to cut back as much as possible. For these smaller shops the risk of IT intrusion and attack is now a big problem. Sadly many of those are in health or social services.