Florence: Inadequate & Sloppy?

You receive a phone call stating there's a bomb in your basement; what do you do? Do you sit around 12 days trying to decide the best way to handle it?

Obviously, hindsight is 20/20; however, we're wondering who knew what and when they knew it. From threat analyst Brent Callew:

“Despite being warned that its network had been compromised, Florence was nonetheless hit by ransomware due to the inadequacy of its response to the initial incident. Organizations cannot afford to be sloppy when it comes to remediating incidents. Completely rebuilding the networking is the only sure-fire way to ensure that an incident such as this does not become a ransomware event in which data is encrypted and possibly exfiltrated.”

That seems a fair assessment, doesn't it?