Link. "The victims of the attacks are usually not those companies, so they bear the expense and reap no direct benefit."