Baltimore demonstrated why cities should never negotiate with cybercriminals or pay ransoms, as this only encourages more attacks and potentially funds criminal organizations or rogue states. While the initial cost of refusing payment may be high, taking a strong stance against ransom payments is crucial for deterring future attacks and maintaining the integrity of government institutions.
The Baltimore ransomware attack exposed critical vulnerabilities in municipal cybersecurity infrastructure. Government systems often run on outdated technology with inadequate security measures due to tight IT budgets and slow procurement cycles. The failure to implement basic cyber-hygiene practices and maintain proper backups made the city an easy target for cybercriminals.