I've had lots of work around the clock scenarios, but nothing like this.
My group manages about 1000 servers and 800 of them are windows servers. Ransomeware nailed nearly every windows server. We've had to entirely rebuild everything.

But how could I ever let that happen?
Well, it happens. Being totally immune is impossible and that's why recovery time is so important.

To this point, our security team has taken the brunt of the blame because it's there systems that failed us, but that's what happens sometimes. Only people who know little wag fingers in situations like this one.