With cyber-attacks in the headlines, a new report provides a gloomy reminder of the deep and long-lasting impact when things go wrong in public corporations.