Average data breach reporting time following a ransomware attack (months)