Fallout from cyberattacks has become increasingly public, disruptive, and detrimental to public and private companies—and to their executives and boards.