When not if ransomware hits