Ransomware is largely the fault of those institutions not keeping backups and having atrocious security practices.