Any general counsel who feels confident their company is impenetrable to a cyberattack is probably fooling themselves.