Most organizations hit by ransomware would pay up if hit again