A significant number of organizations that pay ransomware attackers are subsequently targeted again, according to a new industry report that reinforces long-standing warnings against meeting extortion demands.