I have a few hyper v servers 2012,2016 that have files encrypted on them from a few minutes over night on Dec 17th and Dec 18th. There was no ransom file and I have found no ransomware and don't believe it has happened since and have already restored the files. These servers are in a hyper-converged configuration. Could this be caused by something that was not malicious and just a server screw up on several computers. It only got so far on our large storage server but it only took minutes.