U.S. adults think retailers and credit payment companies should hold most of the responsibility for protecting their data used in online purchases but don't expect companies to give in to ransomware demands.

In a new survey, "Hacking America: Cybersecurity Perception," the Woburn, Mass.-based Kaspersky Lab and San Francisco-based HackerOne also revealed American businesses and consumers still need a more comprehensive understanding of cyberthreats and how to protect personal and sensitive business data online.

The study also looked at how ransomware attacks on businesses are on the rise, from an attack every two minutes in January 2016 to every 40 seconds by October 2016, according to a Kaspersky Lab report. However, almost two in five U.S. adults do not expect companies to pay a ransom if they were hacked. Nevertheless, when asked what types of data they expect businesses to pay a ransom to retrieve information, 43% expect companies to pay for employee social security numbers, followed by customer banking details (40%) and employee banking details (39%).