Cyber-attack! Would your firm handle it better than this?

There's a right way and a wrong way to deal with cyber-attack. How does this fictional company do?