Only 18% of organisations that suffered a ransomware attack paid the ransom, while 59% recovered from backups.