User refused to change her password because everyone already knew it

School staff seemed to be trying to get ransomware – for a second time