Taxpayers against cities paying up in ransomware attacks, says survey