Weeks after a ransomware attack, Latvijas Valsts Meži is still bringing systems back online, a reminder that extortion incidents are often recovery crises as much as security events.