A recent survey found most employees hit by ransomware at work pay the ransom out of their own pockets.