Unfortunately, Silicon Valley, despite Northern California's reputation promoted by the trolls on the right, is a bastion of libertarianism.

And government bureaucrats are woefully uneducated on how to create barriers to reduce ransomware and other attacks.

Robust legislation and/or regulation that commands key institutions and companies to adopt basic security protocols like Resource Public Key Infrastructure (“RPKI”) frameworks (https://scholarship.law.upenn.edu/cgi/viewcontent.cgi?article=3037&context=faculty_scholarship)(PDF) would eliminate 90% of this crap.

Nothing is perfect, but when you leave the garage door open and you have an expensive bicycle inside it, guess what is going to happen?

Make the bad guys AT LEAST unlock the door.

Right now, a lot of these companies and organizations that get broken into are broken into because they are too cheap or stupid to put the most basic padlocks on the door.

American companies with any relevance to basic American infrastructure that aren't willing to adopt basic security measures should be forced to.

Libertarians hate regulation. They can pay for the damages if they want to resist regulation.