A ransomware attack affecting 22 towns in Texas is believed to have had a single point of origin: a security hole, malware, or other weakness in a common, as yet unnamed, managed services provider.