Lots of companies experience data breaches. Very rarely does it ever result in bankruptcy. To the extent, it’s true, incentives can be perverse. If a company never discovers that it’s been hacked, its CIO doesn’t have to report that to the CEO and the CEO doesn’t have to report it to shareholders and customers.