So far, news coverage of ransomware has typically focused on state and local incidents. But that doesn’t mean federal agencies shouldn’t be worried.