North Carolina first state to prohibit state agencies and local government entities from paying ransom following ransomware attack. Law passed part of state’s 2021-2022 budget appropriations, prohibits governments from paying ransom to attacker encrypted their IT system.