We’ve also been hit multiple times through Exchange. Moved away to Outlook Cloud to mitigate the security risks. At the same time we also eliminated everything Microsoft from our on-premise landscape, we’re now Linux only server side and macOS/Linux client side.