This is what happens when you do not run patches and updates

The Information Commissioner’s Office has issued a £98,000 penalty to Tuckers Solicitors based in London. The solicitors firm suffered a ransomware attack where confidential information including, PII and case material was lost.

UK lawyer fined for not patching fast enough before attack • The Register