What can U.S. states do to mitigate ransomware and cybersecurity risks? A two-tiered approach that begins with continuous data care best practices and diligent data recovery measures, followed by public and private partnerships is the most successful path.