Recovery a slow process after cyber attack