Justice dept working to restore IT systems after ransomware