In 40% of ransomware attacks, threat actors threatened to physically harm executives at organizations that declined to pay a ransom demand.