Data encryption was at a six-year low, with only half of companies having their data encrypted in a ransomware attack.