The numbers are in, and Woodstock’s September cyber attack is set to cost the city more than $667,000, even though the city didn’t pay, and never reached out, to the hackers behind the ransomware.

It seems like a big number – roughly nine times what nearby Stratford paid as a ransom after a spring cyber attack – but experts say it’s a short-term hit for a long-term gain in cyber security.

While difficult to compare the Woodstock and Stratford attacks – no two cities conduct cyber security the same way – Woodstock’s costs are in line with what residents should expect, one cyber-sector expert said.