The US government must clean up ransomware reporting and data collection if it wants to devise adequate policy responses.
