Encrypted five days before a change of government, a day after the national CERT warned about ransomware.