with thousands of workers affected. The company believes the ransomware attack originated from a criminal group likely based in Russia