46% of small and medium businesses targeted by ransomware and 73% paid