A staff member of a mid-size CPA firm logged into a public wi-fi network at a coffee shop and spent the morning working on firm files while on the public network. A few days later the employee received an email message from a hacker stating that a ransomware attack had encrypted all of the firm’s files and that all of the files would remain encrypted until a ransom of 2.5 Bitcoin (about $10,000) had been paid.