The hack saw ransomware spread through a software company used by the businesses to manage computer services.