Poor data protection could hit your company hard