There are two types of companies: those that have been hacked, and those who don't know they have been hacked.