More than $2 billion in payments from 4,000 ransomware incidents reported to Treasury in recent years