UK criminal defense lawyer hadn't patched when ransomware hit