ransomware retrospective