Baltimore estimates cost of ransomware attack at $18.2 million as government begins to restore email accounts