“There are only two types of companies—those that know they’ve been compromised, and those that don’t know.”