There were just two ransomware cases reported last year, the Cyber Security Agency says.