There are two types of companies, as the old(ish) saying goes: There are those who have been breached and those who have been breached and don’t know it