Prepared for Ransomware and Other Data Risks? Think Again