Claims ransomware attack forcing staff to use personal emails to send data