Companies caught off guard by holiday and weekend ransomware attacks