If 150,000+ organisations were caught by surprise, I would say it’s clear whatever communication they had was not adequate.

Organisations that didn’t have an off-boarding option (do nothing, pay the minimum, I’ll deal with it) selected should receive monthly reminders, then every 2 weeks (to multiple people), and one per week until a VERY alarming one the week before. And, of course, have all systems shut down and the data archived for a grace period.

I hope they sue Microsoft for what seems neglect.