Nearly half of organisations falling victim to ransomware encryption pay up, says report—although half of those often negotiate the payment down first