Average data breach reporting time (months) following a ransomware attack