Christmas Eve 2018 revealed a harsh truth: cyberattacks don’t take holidays. This article revisits the ransomware incident that disrupted 30,000 businesses worldwide and explores why holiday periods have become a prime target for attackers—and what organizations must do to stay resilient.