[kictanet] How many companies would pay a ransom rather than invest in security?