The Oregon DEQ declined to confirm or deny reports that a well-known ransomware group stole employee files in a recent cyberattack at the agency.