A small municipal utility has the operational exposure of critical infrastructure and the budget of a town department — and no route into the record.
Response cost and extortion demand are different quantities. The phrase “the attack cost £4.5m” invites the error of treating them as one.