"There are two types of companies, those that have been hacked, and those that don’t yet know they have been hacked."