"Cybersecurity teams supporting the city will undoubtedly be working flat out to confirm the extent of any attack to aid officials in deciding if they should pay," says Matt Walmsley, director for Europe, Middle East and Africa at Vectra.