Cathay Pacific was hacked for more than three months, yet more than $1 billion was spent and still lost data on more than 9.4 million customers.