“There are only two kinds of companies: Those that have been hacked, and those that do not know they have been hacked.”