Re: Curious....
Public cloud usually better, for several reasons including need to architect to build it, vendor guidance and patterns and evergreen software. Health Services are always balancing IT costs with more clinical hours and add to their estates over time, lots of medical devices don't get patched etc. The HSE attack was human directed and was probably installed and spreading for days before locking files, so if it got past the perimeter and anti-spyware it had time. Ransomware messages can pop up when end user tries to open a file, when admin runs certain commands or just spam everyone using internal email.