> one particular company whose systems have not been verifiably breached

The unknown unknown. How can you be sure all the "resisted actual attempts" been even detected?