Most SMBs would pay a hacker a ransom to get their stolen data back