Ransomware represented a smaller share of attacks last year, but became more severe as hackers leaked stolen data and caused classes to be canceled.