The local school district staff regularly get phishing emails designed to look like the principal’s and superintendent’s email address.
At the beginning of COVID, someone in the district screwed up and got the entire system locked down with ransomware. The insurance company negotiated with the scammers and regained access at a reduced amount.
A community college in MS had its IT system locked down from ransomware. A reduced payment was negotiated which the specialized insurance covered. After that other CCs went to more secure air-gaped backups.