A third of companies would rather pay a hacker’s ransom, research reveals