Here's why companies leave you in the dark about hacks for months