Ransomware victims in Pennsylvania paid out $5.2 million last year — the most of any state, according to the FBI’s Internet Crime Complaint Center. The FBI figures likely are a significant undercount, since many attacks go unreported.