Bank holidays are a reliable opportunity for attackers, and the reason is straightforward: staffing drops, response times slow, and security alerts sit unread for hours longer than they normally would.
Ransomware operators in particular have a well-documented habit of timing deployment to maximise dwell time before anyone notices. A Friday evening or a bank holiday Monday gives them a meaningful head start on a team that won't be at full strength until Tuesday morning.
Before you log off for the weekend, it's worth confirming a few things: that your out-of-hours alerting is routing to someone who will actually act on it, that your on-call escalation path is current and tested, and that critical systems have monitoring that doesn't depend on someone being at their desk.
None of this requires a major project. It just requires someone to have asked the question before the weekend started rather than after.