This sounds hopeless naive. Do companies even bother carrying insurance for data breaches?