This is an old statistic. I remember when businesses were wiped out and the ransom was this much to get their entire network back. But now even the smallest firms have FAR large ransoms with much greater downtime. Some businesses can’t work at all for months even after paying the ransom.