I was impressed to learn about their sneakernet-based continuity of operations plan: https://www.pcgamer.com/after-a-surprise-cyberattack-the-wor...
It is an unfortunate precedent that they paid the ransom, however, I don't believe there are any institutions better suited for solving financial crimes than banks. I bet they've hedged the risk and have means to go after the hackers.
I'm not impressed by the USB. That it's possible to put transaction details on a USB stick means it's possible for customer data to go walking out the door on a USB stick, too. I'm pretty sure infact this goes against data security requirements of US regulators.
From that end-user direction, solutions emerge. And they're in VBA.