40% of organizations reported that customer and/or employee data was compromised, stolen, or held to ransom in the past year.