Atlanta spent at least $2.6 million on ransomware recovery