The number of records breached dropped nearly 25% globally in 2017, but ransomware breaches still cost organisations US$8 billion, with human error responsible for two-thirds of compromised records.