To combat ransomware, organizations must take proactive steps that make stolen data worthless to attackers