I've worked in what is now called cybersecurity for a long time. Many smaller (like state and local) organizations skimp on backing up data and key executables and have been getting taken down. Most big companies (like Garmin) took steps a few years ago after several large companies had to announce $300M impacts due to ransomware - Garmin is big enough to have avoided or at least mitigated this.
But the bad guys are persistent - like those flies that get in the tent the very every time you forget to pull the zipper all the way up!
Garmin web still saying right now "We are currently experiencing an outage that affects Garmin.com and Garmin Connect. This outage also affects our call centers, and we are currently unable to receive any calls, emails or online chats. We are working to resolve this issue as quickly as possible and apologize for this inconvenience."