Q2 observed more ransomware events than Q1