Yep. When a small company I know of had a major ransomware hit, it took months to reasonably recover and a couple of years to actually get past all of the fallout.