How can Baltimore, or anyone else struck by ransomware attack, get the computers to work again without paying the ransom?

To recover their systems after a ransomware attack without paying the ransom, cities like Baltimore can take several steps:

1. Isolation and Containment: Immediately isolate infected systems to prevent further spread of the ransomware. Disconnect affected devices from the network to contain the attack.

2. Identify the Ransomware: Determine the specific type of ransomware involved to understand its behavior and potential vulnerabilities.

3. Data Recovery: If possible, restore affected systems from backups that were not compromised. Regularly backing up data is essential to recover data without paying the ransom.

4. Cybersecurity Enhancements: Improve cybersecurity measures by updating software, implementing stronger firewalls, and tightening security protocols to prevent future attacks.

5. Incident Response Plan: Develop a comprehensive incident response plan to address and mitigate the effects of ransomware attacks efficiently.

6. Engage with Law Enforcement: Report the ransomware attack to law enforcement agencies, such as the FBI, for investigation and support.

7. Employee Training: Conduct regular training and awareness programs for employees to recognize and respond to cybersecurity threats effectively.

8. Collaboration: Work with cybersecurity experts, government agencies, and private sector organizations to share information and best practices in combating ransomware attacks.

By following these steps, cities like Baltimore can recover their systems after a ransomware attack without succumbing to ransom demands.