Lack of people/capacity was most frequently cited factor for falling for a ransomware attack by those with 251-500 employees.