Ransomware can hit any organization at any time, and hackers are proving adept at social engineering techniques to gain access to sensitive data in any way they can. A case in point can be seen in the attack on MGM Resorts International recently, which proved to be a very expensive incident for the company.
Source: The Register