Ransomware attacks leave businesses and insurers exposed