It's municipal government. There almost certainly were no SSH keys. The problem is that the credentials that the webmaster needs likely only exist in an Excel

It's municipal government. There almost certainly were no SSH keys. The problem is that the credentials that the webmaster needs likely only exist in an Excel spreadsheet that was saved on the desktop of the "Administrator" user account on one of the machines that got hit.