How the city of Baltimore has been crippled by a ransomware attack—and it could take months to recover