Many businesses are still unprepared for ransomware despite past attacks