CHICAGO — It has been nearly two weeks since CNA sustained what it is now calling a “sophisticated ransomware attack,” and the Chicago-based insurance giant’s website remained down Friday afternoon.