Cities Paying Ransomware are Setting a Bad Example