Hi!
It was a big schock when we hear on the PA system of our company that we should inmediatly turn off all computers... just after all of them gave the blue screen and some started encrypting files (a few were completely encripted and the bitcoin ramsom message appeared).
We had to be working all the weekend to restore the affected computers, and the encrypted files are supposedly gone for good, because we have no hope that we will get a decryption of them.
So, please, to all companies, keep the systems updated with all security patches and prepare a protocol for this kind of incidents!