A ransom note was discovered on the affected system, indicating a demand for payment to receive decryption keys. The note challenges the company to decide whether to pay the ransom or restore data from backups. The presence of this note indicates that encryption has likely occurred, and immediate actions are necessary to prevent further damage.