The survey found that more than one in five companies said they were impacted by a cyberattack last year, with large businesses more than twice as likely as small ones to be apparent targets.