A cyber breach is bad enough. Increasingly, companies are finding that those breaches are getting them entangled in compliance trouble with the Securities and Exchange Commission.