SEC filings show hidden ransomware costs and losses