It is very important to regularly back up.
An IT security frIend also said…between backups if doing locally, the back up drive should be removed/isolated so that it does not appear as a drive on a computer should ransomware be inadvertently installed…otherwise the backup drive may also be encrypted rendering the backup worthless.
It is also suggested that should a local backup drive be used, it is external allowing it to be physically disconnected between backups. Using an internal drive should be avoided as it is considered a copy and not a backup.
Alternatively use a reliable and secure cloud/external server when backing up all data.