Which implies those 48% did not employ proper data recovery procedures to recover from an attack! For the life of me, I can't understand why the data recovery industry has not capitalized on the ransomware craze to aggressively market their solutions? Perhaps because their current solutions are cost prohibitive to SMBs? I definitely see economic windfalls here for developers or more targeted, marketers.