60% of companies that paid a ransom got their data back. 32% had to pay an additional ransom, but eventually got their data back. 6% refused to make an additional payment and didn't get their data. 2% never got their data, and didn't get an additional ransom demand either.