“We have not been hacked” – but that’s what a company would say if they had a data breach that was not so easy to prove, wouldn’t they?