Hit by ransomware or paid a ransom? Now some companies will have to tell the government

US lawmakers make mandatory cyberattack reporting law for critical infrastructure.