Only 4% of organizations that pay up recover all their data, and many take months to recover