Fewer than one-quarter of organizations believe they are fully prepared for a ransomware attack, threatening data privacy