SMEs warned over ransomware attacks as 323 companies targeted last year, although fear of breaching compliance leading to underreported financial losses