yeah could be accident or on purpose.

if it was really sneak time, then you would have to establish that your files were only encrypted, and not infected as well.

if you completely trust your files after a ransom attack, you may not like what you bring back.