https://en.wikipedia.org/wiki/Maksim_Yakubets
The burdens of heated economic warfare are falling on private companies, because laws against ransomware can't practically be enforced. If these crimes were taking place entirely within the sphere of a single state, capturing the perpetrators wouldn't be completely impossible as it is now.
Is your company prepared to be raided by a highly trained state-sponsored militia? Would we expect every company to ensure that its facilities can withstand artillery bombardment?