How a midsize American business recovered from a ransomware