Over half of businesses now have a policy on whether to pay out on ransomware attacks, says Databarracks research