Security fail? One in three companies think paying hackers is worth the risk