Half of American businesses have been hit with ransomware this year but many stay silent and spend money instead of informing customers or law enforcement of the breach.